OPENSUSE-SU-2026:21470-1

Vulnerability from csaf_opensuse - Published: 2026-07-28 20:35 - Updated: 2026-07-28 20:35
Summary
Security update for java-21-openjdk
Severity
Important
Notes
Title of the patch: Security update for java-21-openjdk
Description of the patch: This update for java-21-openjdk fixes the following issues: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial of service via TLS (bsc#1272223). - CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224). - CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225). - CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227). - CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228). - CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235). - CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236). - CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237). Changes for java-21-openjdk: - Update to upstream tag jdk-21.0.12+8 (July 2026 CPU): + JDK-7184899: Test sun/java2d/X11SurfaceData/ /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fail + JDK-8015444: java/awt/Focus/KeyStrokeTest.java sometimes fails + JDK-8064922: [macos] Test javax/swing/JTabbedPane/4624207/ /bug4624207.java fails + JDK-8068293: [TEST_BUG] Test closed/com/sun/java/swing/plaf/ /motif/InternalFrame/4150591/bug4150591.java fails with GTKLookAndFeel + JDK-8068310: [TEST_BUG] Test javax/swing/JColorChooser/ /Test4234761.java fails with GTKL&F + JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/ /PrintDialogsTest.java instruction need to update + JDK-8129418: JShell: better highlighting of errors in imports on demand + JDK-8144124: [macosx] The tabs can't be aligned when we pressing the key of 'R','B','L','C' or 'T'. + JDK-8183336: Better cleanup for jdk/test/java/lang/module/ /customfs/ModulesInCustomFileSystem.java + JDK-8203004: UnixMultiResolutionSplashTest.java fails on Ubuntu16.04 + JDK-8212084: G1: Implement UseGCOverheadLimit + JDK-8213530: Test java/awt/Modal/ToFront/ /DialogToFrontModeless1Test.java fails on Linux + JDK-8221451: PIT: sun/java2d/X11SurfaceData/ /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fails + JDK-8225787: java/awt/Window/GetScreenLocation/ /GetScreenLocationTest.java fails on Ubuntu + JDK-8255463: java/nio/channels/spi/SelectorProvider/ /inheritedChannel/InheritedChannelTest.java failed with ThreadTimeoutException + JDK-8274082: Wrong test name in jtreg run tag for java/awt/print/PrinterJob/SwingUIText.java + JDK-8277444: Data race between JvmtiClassFileReconstituter::copy_bytecodes and class linking + JDK-8278102: containers/docker/TestJcmd.java failed with "RuntimeException: Could not find specified process" + JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads the spinner value wrong and sometime partially + JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/ /Test.java fails with Out of space in CodeCache + JDK-8293484: AArch64: TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU with SHA512 feature support + JDK-8297191: [macos] Printing a page range with starting page > 1 results in missing pages + JDK-8298783: java/lang/ref/FinalizerHistogramTest.java failed with "RuntimeException: MyObject is not found in test output" + JDK-8298823: [macos] java/awt/Mouse/EnterExitEvents/ /DragWindowTest.java continues to fail with "No MouseReleased event on label!" + JDK-8299304: Test "java/awt/print/PrinterJob/ /PageDialogTest.java" fails on macOS 13 x64 because the Page Dialog blocks the Toolkit + JDK-8310645: CancelledResponse.java does not use HTTP/2 when testing the HttpClient + JDK-8311538: CDS InternSharedString test fails on huge pages host - cannot find shared string + JDK-8315588: JShell does not accept underscore from JEP 443 even with --enable-preview + JDK-8318365: Test runtime/cds/appcds/sharedStrings/ /InternSharedString.java fails after JDK-8311538 + JDK-8318662: Refactor some jdk/java/net/httpclient/http2 tests to JUnit + JDK-8319326: GC: Make TestParallelRefProc use createTestJavaProcessBuilder + JDK-8319540: GC: Make TestSelectDefaultGC use + JDK-8320677: Printer tests use invalid '@run main/manual=yesno + JDK-8321303: Intermittent open/test/jdk/java/awt/ /KeyboardFocusmanager/ConsumeNextMnemonicKeyTypedTest/ /ConsumeNextMnemonicKeyTypedTest.java failure on Linux + JDK-8321687: Test vmTestbase/nsk/jvmti/scenarios/contention/ /TC03/tc03t002/TestDescription.java failed: JVMTI_ERROR_THREAD_NOT_ALIVE + JDK-8322532: JShell : Unnamed variable issue + JDK-8323089: networkaddress.cache.ttl is not a system property + JDK-8323545: java/awt/GraphicsDevice/CheckDisplayModes.java fails with "exit code: 133" + JDK-8323672: Suppress unwanted autoconf added flags in CC and CXX + JDK-8323792: ThreadSnapshot::initialize can cause assert in Thread::check_for_dangling_thread_pointer (possibility of dangling Thread pointer) + JDK-8326458: Menu mnemonics don't toggle in Windows LAF when F10 is pressed + JDK-8328300: Convert PrintDialogsTest.java from Applet to main program + JDK-8329273: C2 SuperWord: Some basic MemorySegment IR tests + JDK-8330704: Clean up non-standard use of /** comments in some langtools tests + JDK-8330806: test/hotspot/jtreg/compiler/c1/ /TestLargeMonitorOffset.java fails on ARM32 + JDK-8332495: java/util/logging/LoggingDeadlock2.java fails with AssertionError: Some tests failed + JDK-8333729: C2 SuperWord: remove some @requires usages in test/hotspot/jtreg/compiler/loopopts/superword + JDK-8334928: Test sun/security/ssl/SSLSocketImpl/ /ReuseAddr.java failed: java.net.BindException: Address already in use + JDK-8338103: Stabilize and open source a Swing OGL ButtonResizeTest + JDK-8338554: Fix inconsistencies in javadoc/doclet/ /testLinkOption/TestRedirectLinks.java + JDK-8338883: Show warning when CreateCoredumpOnCrash set, but core dump will not happen + JDK-8339233: Test javax/swing/JButton/ /SwingButtonResizeTestWithOpenGL.java#id failed: Button renderings are different after window resize + JDK-8339638: Update vmTestbase/nsk/jvmti/*Field*Watch tests to use virtual thread factory + JDK-8339879: Open some dialog awt tests + JDK-8339975: Open some dialog awt tests 2 + JDK-8340140: Open some dialog awt tests 3 + JDK-8340336: Open some checkbox awt tests + JDK-8340494: Open some dialog awt tests 4 + JDK-8340818: Add a new jtreg test root to test the generated documentation + JDK-8340851: Open some TextArea awt tests + JDK-8340987: Open some TextArea awt tests 1 + JDK-8341055: Open some TextArea awt tests 2 + JDK-8341292: Open some TextArea awt tests 3 + JDK-8341376: Open some TextArea awt tests 4 + JDK-8341427: JFR: Adjust object sampler span handling + JDK-8341436: containers/docker/TestJcmdWithSideCar.java takes needlessly long to run + JDK-8341833: incomplete snippet from loaded files from command line is ignored + JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/ /JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on SBR Hosts + JDK-8342836: Automatically determine that a test in the docs test root is requested + JDK-8344128: Regression: make help broken after JDK-8340818 + JDK-8345618: javax/swing/text/Caret/8163124/ /CaretFloatingPointAPITest.java leaves Caret is not complete + JDK-8346154: [XWayland] Some tests fail intermittently in the CI, but not locally + JDK-8346683: Problem list automated tests that fail on macOS15 + JDK-8347836: Disabled PopupMenu shows shortcuts on Mac + JDK-8349084: Update vectors used in several PQC benchmarks + JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails: ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime - waitThreadCpuTime) < (EXPECTED_ACCURACY * 1000000) + JDK-8349533: Refactor validator tests shell files to java + JDK-8349699: XSL transform fails with certain UTF-8 characters on 1024 byte boundaries + JDK-8349959: Test CR6740048.java passes unexpectedly missing CR6740048.xsd + JDK-8350749: Upgrade JLine to 3.29.0 + JDK-8350808: Small typos in JShell method SnippetEvent .toString() + JDK-8352020: [CompileFramework] enable compilation for VectorAPI + JDK-8352147: G1: TestEagerReclaimHumongousRegionsClearMarkBits test takes very long + JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails: Window list is empty + JDK-8352431: java/net/httpclient/EmptyAuthenticate.java uses "localhost" + JDK-8352685: Opensource JInternalFrame tests - series2 + JDK-8352733: Improve RotFontBoundsTest test + JDK-8352877: Opensource Several Font related tests - Batch 1 + JDK-8353124: java/lang/Thread/virtual/stress/Skynet.java#Z times out on macosx-x64-debug + JDK-8353488: Open some JComboBox bugs 3 + JDK-8353552: Opensource Several Font related tests - Batch 3 + JDK-8354163: Open source Swing tests Batch 1 + JDK-8354695: Open source several swing tests batch7 + JDK-8354900: javax/swing/AbstractButton/bug4133768.java failing on macosx-aarch64 + JDK-8354910: Output by java.io.IO or System.console() corrupted for some non-ASCII characters + JDK-8355048: ProblemList TestGlyphVectorLayout.java on all platforms + JDK-8355179: Reinstate javax/swing/JScrollBar/4865918/ /bug4865918.java headful and macos run + JDK-8355332: Fix failing semi-manual test EDT issue + JDK-8355371: NegativeArraySizeException in print methods in IO or System.console() in JShell + JDK-8355443: [java.io] Use @requires tag instead of exiting based on File.separatorChar value + JDK-8356695: java/lang/StringBuilder/HugeCapacity.java failing with OOME + JDK-8356868: Not all cgroup parameters are made available + JDK-8357062: Update Public Suffix List to 823beb1 + JDK-8357082: Stabilize and add debug logs to CopyAreaOOB.java + JDK-8357086: os::xxx functions returning memory size should return size_t + JDK-8357280: (bf) Remove @requires tags from java/nio/Buffer/ /LimitDirectMemory[NegativeTest].java + JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/ /ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts used by Oracle's internal CI system + JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails intermittently + JDK-8359364: java/net/URL/EarlyOrDelayedParsing test fails + JDK-8359472: JVM crashes when attaching a dynamic agent before JVMTI_PHASE_LIVE + JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java failed again with java.net.SocketException: An established connection was aborted by the software in your host machine + JDK-8360160: ubuntu-22-04 machine is failing client tests + JDK-8360395: sun/security/tools/keytool/i18n.java user country is current user location instead of the language + JDK-8360562: sun/security/tools/keytool/i18n.java add an ability to add comment for failures + JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out + JDK-8360882: Tests throw SkippedException when they should fail + JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails with java.nio.file.FileSystemException + JDK-8361606: ConsumeNextMnemonicKeyTypedTest.java fails on Windows: character typed with VK_A: a + JDK-8361894: sun/security/krb5/config/native/ /TestDynamicStore.java ensure that the test is run with sudo + JDK-8362428: Update IANA Language Subtag Registry to Version 2025-08-25 + JDK-8363943: ARM32: Represent Registers as values + JDK-8363949: Incorrect jtreg header in MonitorWithDeadObjectTest.java + JDK-8364190: JFR: RemoteRecordingStream withers don't work + JDK-8364315: Remove unused xml files from test/jaxp/javax/xml/ /jaxp/functional/javax/xml/transform/xmlfiles + JDK-8364756: JFR: Improve slow tests + JDK-8364927: Add @requires annotation to TestReclaimStringsLeaksMemory.java + JDK-8365379: SU3.applyInsets may produce wrong results + JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/ /CheckLeaseLeak.java failing intermittently + JDK-8365423: [macos26] java/awt/MenuBar/8007006/ /bug8007006.java fails on macOS 26 + JDK-8365424: [macos26] java/awt/Frame/DisposeTest.java fails on macOS 26 + JDK-8365623: test/jdk/sun/security/pkcs11/tls/ tests skipped without skip exception + JDK-8365625: Can't change accelerator colors in Windows L&F + JDK-8365776: Convert JShell tests to use JUnit instead of TestNG + JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests skipped without SkippedException + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip without SkippedException + JDK-8365893: test/jdk/java/lang/Thread/virtual/JfrEvents.java failing intermittently + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/ /CloseDescriptors.java as intermittent + JDK-8366182: Some PKCS11Tests are being skipped when they shouldn't + JDK-8366369: Add @requires linux for GTK L&F tests + JDK-8366852: java/awt/Choice/ChoiceMouseWheelTest/ /ChoiceMouseWheelTest.java test is failing + JDK-8367096: jdk/open/test/jdk/sun/security/pkcs11/ rsa, ec, config, secmod and sslecc tests are skipping but showing as pass + JDK-8367485: os::physical_memory is broken in 32-bit JVMs when running on 64-bit OSes + JDK-8367784: java/awt/Focus/InitialFocusTest/ /InitialFocusTest1.java failed with Wrong focus owner + JDK-8368029: Several tests in httpserver/simpleserver should throw SkipException + JDK-8368041: Enhance TLS certificate handling + JDK-8368181: ProblemList java/awt/Dialog/ModalExcludedTest/ /ModalExcludedTest.java + JDK-8368335: Refactor the rest of Locale TestNG based tests to JUnit + JDK-8368498: Use JUnit instead of TestNG for jdk_text tests + JDK-8368524: Tests are skipped and shown as passed in test/jdk/sun/security/pkcs11/Cipher/KeyWrap + JDK-8368551: Core dump warning may be confusing + JDK-8368625: com/sun/net/httpserver/ /ServerStopTerminationTest.java fails intermittently + JDK-8368670: Deadlock in JFR on event register + class load + JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is too strict + JDK-8368866: compiler/codecache/stress/ /UnexpectedDeoptimizationTest.java intermittent timed out + JDK-8368885: NMT CommandLine tests can check for error better + JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless + JDK-8369251: Opensource few tests + JDK-8369335: Two sun/java2d/OpenGL tests fail on Windows after JDK-8358058 + JDK-8369516: Delete duplicate imaging test + JDK-8369561: sun/java2d/OpenGL/DrawBitmaskImage.java#id0: Incorrect color for first pixel (actual=ff000000) + JDK-8369683: Exclude runtime/Monitor/ /MonitorWithDeadObjectTest.java#DumpThreadsBeforeDetach on Alpine Linux debug + JDK-8369851: Remove darcy author tags from langtools tests + JDK-8369950: TLS connection to IPv6 address fails with BCJSSE due to IllegalArgumentException + JDK-8370378: Some compiler tests inadvertently exclude particular platforms + JDK-8370489: Some compiler tests miss the @key randomness + JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping function + JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java does not release previously pressed keys + JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking gc for nsk/jvmti tests + JDK-8370905: Update vm.defmeth tests to use virtual threads + JDK-8370942: test/jdk/java/security/Provider/NewInstance.java and /test/jdk/java/security/cert/CertStore/NoLDAP.java may skip without notifying + JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may silently skip + JDK-8371349: Update NSS library to 3.117 + JDK-8371364: Refactor javax/swing/JFileChooser/ /FileSizeCheck.java to use Util.findComponent() + JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java to use Util.findComponent() + JDK-8371366: java/net/httpclient/whitebox/ /RawChannelTestDriver.java fails intermittently in jtreg timeout + JDK-8371383: Test sun/security/tools/jarsigner/ /DefaultOptions.java failed due to CertificateNotYetValidException + JDK-8371503: RETAIN_IMAGE_AFTER_TEST do not work for some tests + JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java + JDK-8371967: Add Visual Studio 2026 to build toolchain for Windows + JDK-8372120: Add missing sound keyword to MIDI tests + JDK-8372272: Hotspot shared lib loading - add load attempts to Events::log + JDK-8372351: Add 2 WISeKey roots + JDK-8372609: Bug4944439 does not enforce locale correctly + JDK-8372661: Add a null-safe static factory method to "jdk.test.lib.net.SimpleSSLContext" + JDK-8373101: JdkClient and JdkServer test classes ignore namedGroups field + JDK-8373239: Test java/awt/print/PrinterJob/PageRanges.java fails with incorrect selection of printed pages + JDK-8373275: Improve DTLS handshaking + JDK-8373537: Migrate "test/jdk/com/sun/net/httpserver/" to null-safe "SimpleSSLContext" methods + JDK-8373593: Support latest VS2026 MSC_VER in abstract_vm_version.cpp + JDK-8373623: Refactor Serialization tests for Records to JUnit + JDK-8373632: Some sound tests failing in CI due to lack of sound key + JDK-8373650: Test "javax/swing/JMenuItem/6458123/ /ManualBug6458123.java" fails because the check icons are not aligned properly as expected + JDK-8373690: Unexpected Keystore message using jdk.crypto.disabledAlgorithms + JDK-8373704: Improve "SocketException: Protocol family unavailable" message + JDK-8373716: Refactor further java/util tests from TestNG to + JDK-8373793: TestDynamicStore.java '/manual' disables use of '/timeout' + JDK-8373796: Refactor java/net/httpclient/ /ThrowingPublishers*.java tests to use JUnit5 + JDK-8373807: test/jdk/java/net/httpclient/websocket/ /DummyWebSocketServer.java getURI() uses "localhost" + JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java tests nothing + JDK-8373847: Test javax/swing/JMenuItem/MenuItemTest/ /bug6197830.java failed because The test case automatically fails when clicking any items in the "Nothing" menu in all four windows (Left-to-right)-Menu Item Test and (Right-to-left)-Menu Item Test + JDK-8373866: Refactor java/net/httpclient/ /ThrowingSubscribers*.java tests to use JUnit5 + JDK-8373869: Refactor java/net/httpclient/ /ThrowingPushPromises*.java tests to use JUnit5 + JDK-8373928: 4 Dangling pointer defect groups in java.c + JDK-8373931: Test javax/sound/sampled/Clip/ /AutoCloseTimeCheck.java timed out + JDK-8374058: Enhance JPEG handling + JDK-8374304: MultiResolutionSplashTest.java fails in CI: "Image with wrong resolution is used for splash screen!" + JDK-8374322: TestMemoryWithSubgroups.java fails Permission denied + JDK-8374434: Several JShell tests report JUnit discovery warnings + JDK-8374506: Incorrect positioning of arrow icon in parent JMenu in Windows L&F + JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/ /TestOptionsWithRanges fails without printing the option name + JDK-8374769: PPC: MASM::pop_cont_fastpath() should reset _cont_fastpath if SP == _cont_fastpath + JDK-8374888: Implement internal test cache to help UserIterCount test performance + JDK-8374998: Failing os::write - remove bad file + JDK-8375065: Update LCMS to 2.18 + JDK-8375080: The tools/jpackage/windows/Win8365790Test.java may fail with ClassNotFoundException: jtreg.SkippedException + JDK-8375231: Refactor util/ServiceLoader tests to use JUnit + JDK-8375232: Refactor util/StringJoiner tests to use JUnit + JDK-8375233: Refactor util/Vector tests to use JUnit + JDK-8375742: Test java/lang/invoke/MethodHandleProxies/ /Driver.java does not run Unnamed.java + JDK-8376031: HttpsURLConnection.getServerCertificates() throws "java.lang.IllegalStateException: connection not yet open" for the HEAD method + JDK-8376151: Test javax/swing/JFileChooser/4966171/ /bug4966171.java is failing with OOME + JDK-8376152: Test javax/sound/sampled/Clip/bug5070081.java timed out then completed + JDK-8376233: Clean up code in Desktop native peer + JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert output + JDK-8377158: Enhance XBM image support + JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when x11 unavailable + JDK-8377347: jdk/jfr/event/gc/detailed/ /TestZAllocationStallEvent.java intermittent OOME + JDK-8377498: Improve HttpServer handling + JDK-8377602: Create automated test for PageRange + JDK-8377727: Ghost caret and focus appear in non-editable text fields + JDK-8377833: Enhance Jar file processing + JDK-8377910: Minor cleanup of java/io/FileDescriptor/ /Sharing.java + JDK-8377944: LowMemoryTest2.java#id1 intermittent fails OOME: Metaspace + JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the ProblemList.txt file + JDK-8378201: [OGL] glXMakeContextCurrent() drops the buffers of the unbound drawable + JDK-8378353: [PPC64] StringCoding.countPositives causes errors when the length is not a proper 32 bit int + JDK-8378417: Printing All pages results in NPE for 1.1 PrintJob + JDK-8378561: Mark gc/shenandoah/compiler/ /TestLinkToNativeRBP.java as /native + JDK-8378687: Improve delegation of HttpURLConnection + JDK-8378775: Bump update version for OpenJDK: jdk-21.0.12 + JDK-8378802: [21u] backport changes to TKit.java by JDK-8352419 + JDK-8378810: Enable missing FFM test via jtreg requires for RISC-V + JDK-8378878: Refactor java/nio/channels/ /AsynchronousSocketChannel test to use JUnit + JDK-8379464: Enable missing stack walking test via jtreg requires for RISC-V + JDK-8380011: Path-to-gcroots search should not trigger stack overflows + JDK-8380222: Refactor test/jdk/java/lang/Character TestNG tests to JUnit + JDK-8380316: Test runtime/os/AvailableProcessors.java fails Invalid argument + JDK-8380428: ProblemList containers/docker/ /TestJcmdWithSideCar.java on linux-all + JDK-8380474: Crash SEGV in ThreadIdTable::lazy_initialize after JDK-8323792 + JDK-8380565: PPC64: deoptimization stub should save vector registers + JDK-8380672: Improve certification checking + JDK-8380947: Add pull request template + JDK-8381039: Enhance AWT ImagingLib + JDK-8381049: Enhance Jar handling + JDK-8381205: GHA: Upgrade Node.js 20 to 24 + JDK-8381315: compiler/vectorapi/TestVectorReallocation.java fails with -XX:UseAVX=1 after JDK-8380565 + JDK-8381519: Enhance Der Value Handling + JDK-8381796: Enhance Certificate parsing + JDK-8382018: test/jdk/java/nio/file/spi/ /SetDefaultProvider.java leaves a directory in /tmp + JDK-8382242: JFR: Metadata reconstruction invalidates ConstantMap for java.lang.String + JDK-8382419: Add missed @key randomness after JDK-8370489 + JDK-8383175: (tz) Update Timezone Data to 2026b + JDK-8383185: [21u] Backport of JDK-8382925 causes test failure in SetDefaultProvider + JDK-8383354: Update LCMS to 2.19.1 + JDK-8383473: Follow on from tzdata2026b time change to include temporary hack BC time change + JDK-8383601: RISC-V: ShenandoahBarrierSetAssembler::load_reference_barrier calls "weak" on "phantom" path + JDK-8383630: Fix iteration in tests doing class redefinition + JDK-8384158: GHA: Downgrade Windows GHA runners to windows-2022 temporarily + JDK-8384486: NTLM tests fail on Windows 11 and Windows Server 2025 + JDK-8384495: Update Libpng to 1.6.58 + JDK-8384540: [25u, 21u, 17u] Update GHA JDKs after Apr/26 updates + JDK-8384815: SelectOneKeyOutOfMany and PreferredKey fail after expired test certificate + JDK-8384902: Update GIFlib to 6.1.3 + JDK-8385390: Update FreeType to 2.14.3 + JDK-8385490: Update HarfBuzz to 14.2.0 + JDK-8386551: Windows build broken because of MSys2/Make update
Patchnames: openSUSE-Leap-16.0-1385
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-41254
2.9 (Low)
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-46917
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-46968
5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-47010
3.7 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact low
CVE-2026-47021
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-47027
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2026-47059
3.7 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact low
CVE-2026-47063
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact important
CVE-2026-60147
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://bugzilla.suse.com/1264994 self
https://bugzilla.suse.com/1272223 self
https://bugzilla.suse.com/1272224 self
https://bugzilla.suse.com/1272225 self
https://bugzilla.suse.com/1272227 self
https://bugzilla.suse.com/1272228 self
https://bugzilla.suse.com/1272235 self
https://bugzilla.suse.com/1272236 self
https://bugzilla.suse.com/1272237 self
https://www.suse.com/security/cve/CVE-2026-41254/ self
https://www.suse.com/security/cve/CVE-2026-46917/ self
https://www.suse.com/security/cve/CVE-2026-46968/ self
https://www.suse.com/security/cve/CVE-2026-47010/ self
https://www.suse.com/security/cve/CVE-2026-47021/ self
https://www.suse.com/security/cve/CVE-2026-47027/ self
https://www.suse.com/security/cve/CVE-2026-47059/ self
https://www.suse.com/security/cve/CVE-2026-47063/ self
https://www.suse.com/security/cve/CVE-2026-60147/ self
https://www.suse.com/security/cve/CVE-2026-41254 external
https://bugzilla.suse.com/1264994 external
https://bugzilla.suse.com/1272458 external
https://www.suse.com/security/cve/CVE-2026-46917 external
https://bugzilla.suse.com/1272223 external
https://www.suse.com/security/cve/CVE-2026-46968 external
https://bugzilla.suse.com/1272224 external
https://www.suse.com/security/cve/CVE-2026-47010 external
https://bugzilla.suse.com/1272225 external
https://www.suse.com/security/cve/CVE-2026-47021 external
https://bugzilla.suse.com/1272227 external
https://www.suse.com/security/cve/CVE-2026-47027 external
https://bugzilla.suse.com/1272228 external
https://www.suse.com/security/cve/CVE-2026-47059 external
https://bugzilla.suse.com/1272235 external
https://www.suse.com/security/cve/CVE-2026-47063 external
https://bugzilla.suse.com/1272236 external
https://www.suse.com/security/cve/CVE-2026-60147 external
https://bugzilla.suse.com/1272237 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for java-21-openjdk",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for java-21-openjdk fixes the following issues:\n\n- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).\n- CVE-2026-46917: partial denial of service via TLS (bsc#1272223).\n- CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).\n- CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).\n- CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).\n- CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).\n- CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).\n- CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).\n- CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).\n\nChanges for java-21-openjdk:\n\n- Update to upstream tag jdk-21.0.12+8 (July 2026 CPU):\n\n + JDK-7184899: Test sun/java2d/X11SurfaceData/\n /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fail\n + JDK-8015444: java/awt/Focus/KeyStrokeTest.java sometimes fails\n + JDK-8064922: [macos] Test javax/swing/JTabbedPane/4624207/\n /bug4624207.java fails\n + JDK-8068293: [TEST_BUG] Test closed/com/sun/java/swing/plaf/\n /motif/InternalFrame/4150591/bug4150591.java fails with\n GTKLookAndFeel\n + JDK-8068310: [TEST_BUG] Test javax/swing/JColorChooser/\n /Test4234761.java fails with GTKL\u0026F\n + JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/\n /PrintDialogsTest.java instruction need to update\n + JDK-8129418: JShell: better highlighting of errors in imports\n on demand\n + JDK-8144124: [macosx] The tabs can\u0027t be aligned when we\n pressing the key of \u0027R\u0027,\u0027B\u0027,\u0027L\u0027,\u0027C\u0027 or \u0027T\u0027.\n + JDK-8183336: Better cleanup for jdk/test/java/lang/module/\n /customfs/ModulesInCustomFileSystem.java\n + JDK-8203004: UnixMultiResolutionSplashTest.java fails on\n Ubuntu16.04\n + JDK-8212084: G1: Implement UseGCOverheadLimit\n + JDK-8213530: Test java/awt/Modal/ToFront/\n /DialogToFrontModeless1Test.java fails on Linux\n + JDK-8221451: PIT: sun/java2d/X11SurfaceData/\n /SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fails\n + JDK-8225787: java/awt/Window/GetScreenLocation/\n /GetScreenLocationTest.java fails on Ubuntu\n + JDK-8255463: java/nio/channels/spi/SelectorProvider/\n /inheritedChannel/InheritedChannelTest.java failed with\n ThreadTimeoutException\n + JDK-8274082: Wrong test name in jtreg run tag for\n java/awt/print/PrinterJob/SwingUIText.java\n + JDK-8277444: Data race between\n JvmtiClassFileReconstituter::copy_bytecodes and class linking\n + JDK-8278102: containers/docker/TestJcmd.java failed with\n \"RuntimeException: Could not find specified process\"\n + JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads\n the spinner value wrong and sometime partially\n + JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/\n /Test.java fails with Out of space in CodeCache\n + JDK-8293484: AArch64:\n TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU\n with SHA512 feature support\n + JDK-8297191: [macos] Printing a page range with starting\n page \u003e 1 results in missing pages\n + JDK-8298783: java/lang/ref/FinalizerHistogramTest.java failed\n with \"RuntimeException: MyObject is not found in test output\"\n + JDK-8298823: [macos] java/awt/Mouse/EnterExitEvents/\n /DragWindowTest.java continues to fail with \"No MouseReleased\n event on label!\"\n + JDK-8299304: Test \"java/awt/print/PrinterJob/\n /PageDialogTest.java\" fails on macOS 13 x64 because the Page\n Dialog blocks the Toolkit\n + JDK-8310645: CancelledResponse.java does not use HTTP/2 when\n testing the HttpClient\n + JDK-8311538: CDS InternSharedString test fails on huge pages\n host - cannot find shared string\n + JDK-8315588: JShell does not accept underscore from JEP 443\n even with --enable-preview\n + JDK-8318365: Test runtime/cds/appcds/sharedStrings/\n /InternSharedString.java fails after JDK-8311538\n + JDK-8318662: Refactor some jdk/java/net/httpclient/http2 tests\n to JUnit\n + JDK-8319326: GC: Make TestParallelRefProc use\n createTestJavaProcessBuilder\n + JDK-8319540: GC: Make TestSelectDefaultGC use\n + JDK-8320677: Printer tests use invalid \u0027@run main/manual=yesno\n + JDK-8321303: Intermittent open/test/jdk/java/awt/\n /KeyboardFocusmanager/ConsumeNextMnemonicKeyTypedTest/\n /ConsumeNextMnemonicKeyTypedTest.java failure on Linux\n + JDK-8321687: Test vmTestbase/nsk/jvmti/scenarios/contention/\n /TC03/tc03t002/TestDescription.java failed:\n JVMTI_ERROR_THREAD_NOT_ALIVE\n + JDK-8322532: JShell : Unnamed variable issue\n + JDK-8323089: networkaddress.cache.ttl is not a system property\n + JDK-8323545: java/awt/GraphicsDevice/CheckDisplayModes.java\n fails with \"exit code: 133\"\n + JDK-8323672: Suppress unwanted autoconf added flags in CC and\n CXX\n + JDK-8323792: ThreadSnapshot::initialize can cause assert in\n Thread::check_for_dangling_thread_pointer (possibility of\n dangling Thread pointer)\n + JDK-8326458: Menu mnemonics don\u0027t toggle in Windows LAF when\n F10 is pressed\n + JDK-8328300: Convert PrintDialogsTest.java from Applet to main\n program\n + JDK-8329273: C2 SuperWord: Some basic MemorySegment IR tests\n + JDK-8330704: Clean up non-standard use of /** comments in some\n langtools tests\n + JDK-8330806: test/hotspot/jtreg/compiler/c1/\n /TestLargeMonitorOffset.java fails on ARM32\n + JDK-8332495: java/util/logging/LoggingDeadlock2.java fails\n with AssertionError: Some tests failed\n + JDK-8333729: C2 SuperWord: remove some @requires usages in\n test/hotspot/jtreg/compiler/loopopts/superword\n + JDK-8334928: Test sun/security/ssl/SSLSocketImpl/\n /ReuseAddr.java failed: java.net.BindException: Address\n already in use\n + JDK-8338103: Stabilize and open source a Swing OGL\n ButtonResizeTest\n + JDK-8338554: Fix inconsistencies in javadoc/doclet/\n /testLinkOption/TestRedirectLinks.java\n + JDK-8338883: Show warning when CreateCoredumpOnCrash set, but\n core dump will not happen\n + JDK-8339233: Test javax/swing/JButton/\n /SwingButtonResizeTestWithOpenGL.java#id failed: Button\n renderings are different after window resize\n + JDK-8339638: Update vmTestbase/nsk/jvmti/*Field*Watch tests to\n use virtual thread factory\n + JDK-8339879: Open some dialog awt tests\n + JDK-8339975: Open some dialog awt tests 2\n + JDK-8340140: Open some dialog awt tests 3\n + JDK-8340336: Open some checkbox awt tests\n + JDK-8340494: Open some dialog awt tests 4\n + JDK-8340818: Add a new jtreg test root to test the generated\n documentation\n + JDK-8340851: Open some TextArea awt tests\n + JDK-8340987: Open some TextArea awt tests 1\n + JDK-8341055: Open some TextArea awt tests 2\n + JDK-8341292: Open some TextArea awt tests 3\n + JDK-8341376: Open some TextArea awt tests 4\n + JDK-8341427: JFR: Adjust object sampler span handling\n + JDK-8341436: containers/docker/TestJcmdWithSideCar.java takes\n needlessly long to run\n + JDK-8341833: incomplete snippet from loaded files from command\n line is ignored\n + JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/\n /JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on\n SBR Hosts\n + JDK-8342836: Automatically determine that a test in the docs\n test root is requested\n + JDK-8344128: Regression: make help broken after JDK-8340818\n + JDK-8345618: javax/swing/text/Caret/8163124/\n /CaretFloatingPointAPITest.java leaves Caret is not complete\n + JDK-8346154: [XWayland] Some tests fail intermittently in the\n CI, but not locally\n + JDK-8346683: Problem list automated tests that fail on macOS15\n + JDK-8347836: Disabled PopupMenu shows shortcuts on Mac\n + JDK-8349084: Update vectors used in several PQC benchmarks\n + JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails:\n ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime -\n waitThreadCpuTime) \u003c (EXPECTED_ACCURACY * 1000000)\n + JDK-8349533: Refactor validator tests shell files to java\n + JDK-8349699: XSL transform fails with certain UTF-8 characters\n on 1024 byte boundaries\n + JDK-8349959: Test CR6740048.java passes unexpectedly missing\n CR6740048.xsd\n + JDK-8350749: Upgrade JLine to 3.29.0\n + JDK-8350808: Small typos in JShell method SnippetEvent\n .toString()\n + JDK-8352020: [CompileFramework] enable compilation for\n VectorAPI\n + JDK-8352147: G1: TestEagerReclaimHumongousRegionsClearMarkBits\n test takes very long\n + JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails:\n Window list is empty\n + JDK-8352431: java/net/httpclient/EmptyAuthenticate.java uses\n \"localhost\"\n + JDK-8352685: Opensource JInternalFrame tests - series2\n + JDK-8352733: Improve RotFontBoundsTest test\n + JDK-8352877: Opensource Several Font related tests - Batch 1\n + JDK-8353124: java/lang/Thread/virtual/stress/Skynet.java#Z\n times out on macosx-x64-debug\n + JDK-8353488: Open some JComboBox bugs 3\n + JDK-8353552: Opensource Several Font related tests - Batch 3\n + JDK-8354163: Open source Swing tests Batch 1\n + JDK-8354695: Open source several swing tests batch7\n + JDK-8354900: javax/swing/AbstractButton/bug4133768.java\n failing on macosx-aarch64\n + JDK-8354910: Output by java.io.IO or System.console()\n corrupted for some non-ASCII characters\n + JDK-8355048: ProblemList TestGlyphVectorLayout.java on all\n platforms\n + JDK-8355179: Reinstate javax/swing/JScrollBar/4865918/\n /bug4865918.java headful and macos run\n + JDK-8355332: Fix failing semi-manual test EDT issue\n + JDK-8355371: NegativeArraySizeException in print methods in IO\n or System.console() in JShell\n + JDK-8355443: [java.io] Use @requires tag instead of exiting\n based on File.separatorChar value\n + JDK-8356695: java/lang/StringBuilder/HugeCapacity.java failing\n with OOME\n + JDK-8356868: Not all cgroup parameters are made available\n + JDK-8357062: Update Public Suffix List to 823beb1\n + JDK-8357082: Stabilize and add debug logs to CopyAreaOOB.java\n + JDK-8357086: os::xxx functions returning memory size should\n return size_t\n + JDK-8357280: (bf) Remove @requires tags from java/nio/Buffer/\n /LimitDirectMemory[NegativeTest].java\n + JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/\n /ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts\n used by Oracle\u0027s internal CI system\n + JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails\n intermittently\n + JDK-8359364: java/net/URL/EarlyOrDelayedParsing test fails\n + JDK-8359472: JVM crashes when attaching a dynamic agent before\n JVMTI_PHASE_LIVE\n + JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java\n failed again with java.net.SocketException: An established\n connection was aborted by the software in your host machine\n + JDK-8360160: ubuntu-22-04 machine is failing client tests\n + JDK-8360395: sun/security/tools/keytool/i18n.java user country\n is current user location instead of the language\n + JDK-8360562: sun/security/tools/keytool/i18n.java add an\n ability to add comment for failures\n + JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out\n + JDK-8360882: Tests throw SkippedException when they should\n fail\n + JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails\n with java.nio.file.FileSystemException\n + JDK-8361606: ConsumeNextMnemonicKeyTypedTest.java fails on\n Windows: character typed with VK_A: a\n + JDK-8361894: sun/security/krb5/config/native/\n /TestDynamicStore.java ensure that the test is run with sudo\n + JDK-8362428: Update IANA Language Subtag Registry to Version\n 2025-08-25\n + JDK-8363943: ARM32: Represent Registers as values\n + JDK-8363949: Incorrect jtreg header in\n MonitorWithDeadObjectTest.java\n + JDK-8364190: JFR: RemoteRecordingStream withers don\u0027t work\n + JDK-8364315: Remove unused xml files from test/jaxp/javax/xml/\n /jaxp/functional/javax/xml/transform/xmlfiles\n + JDK-8364756: JFR: Improve slow tests\n + JDK-8364927: Add @requires annotation to\n TestReclaimStringsLeaksMemory.java\n + JDK-8365379: SU3.applyInsets may produce wrong results\n + JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/\n /CheckLeaseLeak.java failing intermittently\n + JDK-8365423: [macos26] java/awt/MenuBar/8007006/\n /bug8007006.java fails on macOS 26\n + JDK-8365424: [macos26] java/awt/Frame/DisposeTest.java fails\n on macOS 26\n + JDK-8365623: test/jdk/sun/security/pkcs11/tls/ tests skipped\n without skip exception\n + JDK-8365625: Can\u0027t change accelerator colors in Windows L\u0026F\n + JDK-8365776: Convert JShell tests to use JUnit instead of\n TestNG\n + JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests\n skipped without SkippedException\n + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip\n without SkippedException\n + JDK-8365893: test/jdk/java/lang/Thread/virtual/JfrEvents.java\n failing intermittently\n + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/\n /CloseDescriptors.java as intermittent\n + JDK-8366182: Some PKCS11Tests are being skipped when they\n shouldn\u0027t\n + JDK-8366369: Add @requires linux for GTK L\u0026F tests\n + JDK-8366852: java/awt/Choice/ChoiceMouseWheelTest/\n /ChoiceMouseWheelTest.java test is failing\n + JDK-8367096: jdk/open/test/jdk/sun/security/pkcs11/ rsa, ec,\n config, secmod and sslecc tests are skipping but showing as\n pass\n + JDK-8367485: os::physical_memory is broken in 32-bit JVMs when\n running on 64-bit OSes\n + JDK-8367784: java/awt/Focus/InitialFocusTest/\n /InitialFocusTest1.java failed with Wrong focus owner\n + JDK-8368029: Several tests in httpserver/simpleserver should\n throw SkipException\n + JDK-8368041: Enhance TLS certificate handling\n + JDK-8368181: ProblemList java/awt/Dialog/ModalExcludedTest/\n /ModalExcludedTest.java\n + JDK-8368335: Refactor the rest of Locale TestNG based tests to\n JUnit\n + JDK-8368498: Use JUnit instead of TestNG for jdk_text tests\n + JDK-8368524: Tests are skipped and shown as passed in\n test/jdk/sun/security/pkcs11/Cipher/KeyWrap\n + JDK-8368551: Core dump warning may be confusing\n + JDK-8368625: com/sun/net/httpserver/\n /ServerStopTerminationTest.java fails intermittently\n + JDK-8368670: Deadlock in JFR on event register + class load\n + JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is\n too strict\n + JDK-8368866: compiler/codecache/stress/\n /UnexpectedDeoptimizationTest.java intermittent timed out\n + JDK-8368885: NMT CommandLine tests can check for error better\n + JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless\n + JDK-8369251: Opensource few tests\n + JDK-8369335: Two sun/java2d/OpenGL tests fail on Windows\n after JDK-8358058\n + JDK-8369516: Delete duplicate imaging test\n + JDK-8369561: sun/java2d/OpenGL/DrawBitmaskImage.java#id0:\n Incorrect color for first pixel (actual=ff000000)\n + JDK-8369683: Exclude runtime/Monitor/\n /MonitorWithDeadObjectTest.java#DumpThreadsBeforeDetach on\n Alpine Linux debug\n + JDK-8369851: Remove darcy author tags from langtools tests\n + JDK-8369950: TLS connection to IPv6 address fails with BCJSSE\n due to IllegalArgumentException\n + JDK-8370378: Some compiler tests inadvertently exclude\n particular platforms\n + JDK-8370489: Some compiler tests miss the @key randomness\n + JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping\n function\n + JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java does\n not release previously pressed keys\n + JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking\n gc for nsk/jvmti tests\n + JDK-8370905: Update vm.defmeth tests to use virtual threads\n + JDK-8370942: test/jdk/java/security/Provider/NewInstance.java\n and /test/jdk/java/security/cert/CertStore/NoLDAP.java may\n skip without notifying\n + JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may\n silently skip\n + JDK-8371349: Update NSS library to 3.117\n + JDK-8371364: Refactor javax/swing/JFileChooser/\n /FileSizeCheck.java to use Util.findComponent()\n + JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java\n to use Util.findComponent()\n + JDK-8371366: java/net/httpclient/whitebox/\n /RawChannelTestDriver.java fails intermittently in jtreg\n timeout\n + JDK-8371383: Test sun/security/tools/jarsigner/\n /DefaultOptions.java failed due to\n CertificateNotYetValidException\n + JDK-8371503: RETAIN_IMAGE_AFTER_TEST do not work for some\n tests\n + JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java\n + JDK-8371967: Add Visual Studio 2026 to build toolchain for\n Windows\n + JDK-8372120: Add missing sound keyword to MIDI tests\n + JDK-8372272: Hotspot shared lib loading - add load attempts to\n Events::log\n + JDK-8372351: Add 2 WISeKey roots\n + JDK-8372609: Bug4944439 does not enforce locale correctly\n + JDK-8372661: Add a null-safe static factory method to\n \"jdk.test.lib.net.SimpleSSLContext\"\n + JDK-8373101: JdkClient and JdkServer test classes ignore\n namedGroups field\n + JDK-8373239: Test java/awt/print/PrinterJob/PageRanges.java\n fails with incorrect selection of printed pages\n + JDK-8373275: Improve DTLS handshaking\n + JDK-8373537: Migrate \"test/jdk/com/sun/net/httpserver/\" to\n null-safe \"SimpleSSLContext\" methods\n + JDK-8373593: Support latest VS2026 MSC_VER in\n abstract_vm_version.cpp\n + JDK-8373623: Refactor Serialization tests for Records to JUnit\n + JDK-8373632: Some sound tests failing in CI due to lack of\n sound key\n + JDK-8373650: Test \"javax/swing/JMenuItem/6458123/\n /ManualBug6458123.java\" fails because the check icons are not\n aligned properly as expected\n + JDK-8373690: Unexpected Keystore message using\n jdk.crypto.disabledAlgorithms\n + JDK-8373704: Improve \"SocketException: Protocol family\n unavailable\" message\n + JDK-8373716: Refactor further java/util tests from TestNG to\n + JDK-8373793: TestDynamicStore.java \u0027/manual\u0027 disables use of\n \u0027/timeout\u0027\n + JDK-8373796: Refactor java/net/httpclient/\n /ThrowingPublishers*.java tests to use JUnit5\n + JDK-8373807: test/jdk/java/net/httpclient/websocket/\n /DummyWebSocketServer.java getURI() uses \"localhost\"\n + JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java\n tests nothing\n + JDK-8373847: Test javax/swing/JMenuItem/MenuItemTest/\n /bug6197830.java failed because The test case automatically\n fails when clicking any items in the \"Nothing\" menu in all\n four windows (Left-to-right)-Menu Item Test and\n (Right-to-left)-Menu Item Test\n + JDK-8373866: Refactor java/net/httpclient/\n /ThrowingSubscribers*.java tests to use JUnit5\n + JDK-8373869: Refactor java/net/httpclient/\n /ThrowingPushPromises*.java tests to use JUnit5\n + JDK-8373928: 4 Dangling pointer defect groups in java.c\n + JDK-8373931: Test javax/sound/sampled/Clip/\n /AutoCloseTimeCheck.java timed out\n + JDK-8374058: Enhance JPEG handling\n + JDK-8374304: MultiResolutionSplashTest.java fails in CI:\n \"Image with wrong resolution is used for splash screen!\"\n + JDK-8374322: TestMemoryWithSubgroups.java fails Permission\n denied\n + JDK-8374434: Several JShell tests report JUnit discovery\n warnings\n + JDK-8374506: Incorrect positioning of arrow icon in parent\n JMenu in Windows L\u0026F\n + JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/\n /TestOptionsWithRanges fails without printing the option name\n + JDK-8374769: PPC: MASM::pop_cont_fastpath() should reset\n _cont_fastpath if SP == _cont_fastpath\n + JDK-8374888: Implement internal test cache to help\n UserIterCount test performance\n + JDK-8374998: Failing os::write - remove bad file\n + JDK-8375065: Update LCMS to 2.18\n + JDK-8375080: The tools/jpackage/windows/Win8365790Test.java\n may fail with ClassNotFoundException: jtreg.SkippedException\n + JDK-8375231: Refactor util/ServiceLoader tests to use JUnit\n + JDK-8375232: Refactor util/StringJoiner tests to use JUnit\n + JDK-8375233: Refactor util/Vector tests to use JUnit\n + JDK-8375742: Test java/lang/invoke/MethodHandleProxies/\n /Driver.java does not run Unnamed.java\n + JDK-8376031: HttpsURLConnection.getServerCertificates() throws\n \"java.lang.IllegalStateException: connection not yet open\" for\n the HEAD method\n + JDK-8376151: Test javax/swing/JFileChooser/4966171/\n /bug4966171.java is failing with OOME\n + JDK-8376152: Test javax/sound/sampled/Clip/bug5070081.java\n timed out then completed\n + JDK-8376233: Clean up code in Desktop native peer\n + JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert\n output\n + JDK-8377158: Enhance XBM image support\n + JDK-8377167: javax/imageio/ReadAbortTest.java throw NPE when\n x11 unavailable\n + JDK-8377347: jdk/jfr/event/gc/detailed/\n /TestZAllocationStallEvent.java intermittent OOME\n + JDK-8377498: Improve HttpServer handling\n + JDK-8377602: Create automated test for PageRange\n + JDK-8377727: Ghost caret and focus appear in non-editable text\n fields\n + JDK-8377833: Enhance Jar file processing\n + JDK-8377910: Minor cleanup of java/io/FileDescriptor/\n /Sharing.java\n + JDK-8377944: LowMemoryTest2.java#id1 intermittent fails OOME:\n Metaspace\n + JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the\n ProblemList.txt file\n + JDK-8378201: [OGL] glXMakeContextCurrent() drops the buffers\n of the unbound drawable\n + JDK-8378353: [PPC64] StringCoding.countPositives causes errors\n when the length is not a proper 32 bit int\n + JDK-8378417: Printing All pages results in NPE for 1.1\n PrintJob\n + JDK-8378561: Mark gc/shenandoah/compiler/\n /TestLinkToNativeRBP.java as /native\n + JDK-8378687: Improve delegation of HttpURLConnection\n + JDK-8378775: Bump update version for OpenJDK: jdk-21.0.12\n + JDK-8378802: [21u] backport changes to TKit.java by\n JDK-8352419\n + JDK-8378810: Enable missing FFM test via jtreg requires for\n RISC-V\n + JDK-8378878: Refactor java/nio/channels/\n /AsynchronousSocketChannel test to use JUnit\n + JDK-8379464: Enable missing stack walking test via jtreg\n requires for RISC-V\n + JDK-8380011: Path-to-gcroots search should not trigger stack\n overflows\n + JDK-8380222: Refactor test/jdk/java/lang/Character TestNG\n tests to JUnit\n + JDK-8380316: Test runtime/os/AvailableProcessors.java fails\n Invalid argument\n + JDK-8380428: ProblemList containers/docker/\n /TestJcmdWithSideCar.java on linux-all\n + JDK-8380474: Crash SEGV in ThreadIdTable::lazy_initialize\n after JDK-8323792\n + JDK-8380565: PPC64: deoptimization stub should save vector\n registers\n + JDK-8380672: Improve certification checking\n + JDK-8380947: Add pull request template\n + JDK-8381039: Enhance AWT ImagingLib\n + JDK-8381049: Enhance Jar handling\n + JDK-8381205: GHA: Upgrade Node.js 20 to 24\n + JDK-8381315: compiler/vectorapi/TestVectorReallocation.java\n fails with -XX:UseAVX=1 after JDK-8380565\n + JDK-8381519: Enhance Der Value Handling\n + JDK-8381796: Enhance Certificate parsing\n + JDK-8382018: test/jdk/java/nio/file/spi/\n /SetDefaultProvider.java leaves a directory in /tmp\n + JDK-8382242: JFR: Metadata reconstruction invalidates\n ConstantMap for java.lang.String\n + JDK-8382419: Add missed @key randomness after JDK-8370489\n + JDK-8383175: (tz) Update Timezone Data to 2026b\n + JDK-8383185: [21u] Backport of JDK-8382925 causes test failure\n in SetDefaultProvider\n + JDK-8383354: Update LCMS to 2.19.1\n + JDK-8383473: Follow on from tzdata2026b time change to include\n temporary hack BC time change\n + JDK-8383601: RISC-V:\n ShenandoahBarrierSetAssembler::load_reference_barrier calls\n \"weak\" on \"phantom\" path\n + JDK-8383630: Fix iteration in tests doing class redefinition\n + JDK-8384158: GHA: Downgrade Windows GHA runners to\n windows-2022 temporarily\n + JDK-8384486: NTLM tests fail on Windows 11 and Windows Server\n 2025\n + JDK-8384495: Update Libpng to 1.6.58\n + JDK-8384540: [25u, 21u, 17u] Update GHA JDKs after Apr/26\n updates\n + JDK-8384815: SelectOneKeyOutOfMany and PreferredKey fail after\n expired test certificate\n + JDK-8384902: Update GIFlib to 6.1.3\n + JDK-8385390: Update FreeType to 2.14.3\n + JDK-8385490: Update HarfBuzz to 14.2.0\n + JDK-8386551: Windows build broken because of MSys2/Make update\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-1385",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21470-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264994",
        "url": "https://bugzilla.suse.com/1264994"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272223",
        "url": "https://bugzilla.suse.com/1272223"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272224",
        "url": "https://bugzilla.suse.com/1272224"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272225",
        "url": "https://bugzilla.suse.com/1272225"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272227",
        "url": "https://bugzilla.suse.com/1272227"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272228",
        "url": "https://bugzilla.suse.com/1272228"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272235",
        "url": "https://bugzilla.suse.com/1272235"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272236",
        "url": "https://bugzilla.suse.com/1272236"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272237",
        "url": "https://bugzilla.suse.com/1272237"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-41254 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-41254/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46917 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46917/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46968 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46968/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-47010 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-47010/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-47021 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-47021/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-47027 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-47027/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-47059 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-47059/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-47063 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-47063/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-60147 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-60147/"
      }
    ],
    "title": "Security update for java-21-openjdk",
    "tracking": {
      "current_release_date": "2026-07-28T20:35:22Z",
      "generator": {
        "date": "2026-07-28T20:35:22Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:21470-1",
      "initial_release_date": "2026-07-28T20:35:22Z",
      "revision_history": [
        {
          "date": "2026-07-28T20:35:22Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
                  "product_id": "java-21-openjdk-21.0.12.0-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
                  "product_id": "java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
                  "product_id": "java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
                  "product_id": "java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
                  "product_id": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
                "product": {
                  "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
                  "product_id": "java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
                "product": {
                  "name": "java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
                  "product_id": "java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
                  "product_id": "java-21-openjdk-21.0.12.0-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
                  "product_id": "java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
                  "product_id": "java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
                  "product_id": "java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
                  "product_id": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
                "product": {
                  "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
                  "product_id": "java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-21-openjdk-21.0.12.0-160000.1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-21.0.12.0-160000.1.1.s390x",
                  "product_id": "java-21-openjdk-21.0.12.0-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
                  "product_id": "java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
                  "product_id": "java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
                  "product_id": "java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
                  "product_id": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
                "product": {
                  "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
                  "product_id": "java-21-openjdk-src-21.0.12.0-160000.1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
                  "product_id": "java-21-openjdk-21.0.12.0-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
                  "product_id": "java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
                  "product_id": "java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
                  "product_id": "java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
                  "product_id": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64",
                "product": {
                  "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64",
                  "product_id": "java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x"
        },
        "product_reference": "java-21-openjdk-21.0.12.0-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x"
        },
        "product_reference": "java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x"
        },
        "product_reference": "java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x"
        },
        "product_reference": "java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch"
        },
        "product_reference": "java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x"
        },
        "product_reference": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64"
        },
        "product_reference": "java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le"
        },
        "product_reference": "java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x"
        },
        "product_reference": "java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
        },
        "product_reference": "java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-41254",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-41254"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-41254",
          "url": "https://www.suse.com/security/cve/CVE-2026-41254"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264994 for CVE-2026-41254",
          "url": "https://bugzilla.suse.com/1264994"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272458 for CVE-2026-41254",
          "url": "https://bugzilla.suse.com/1272458"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-28T20:35:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-41254"
    },
    {
      "cve": "CVE-2026-46917",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46917"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46917",
          "url": "https://www.suse.com/security/cve/CVE-2026-46917"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272223 for CVE-2026-46917",
          "url": "https://bugzilla.suse.com/1272223"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-28T20:35:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46917"
    },
    {
      "cve": "CVE-2026-46968",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46968"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46968",
          "url": "https://www.suse.com/security/cve/CVE-2026-46968"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272224 for CVE-2026-46968",
          "url": "https://bugzilla.suse.com/1272224"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-28T20:35:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-46968"
    },
    {
      "cve": "CVE-2026-47010",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-47010"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-47010",
          "url": "https://www.suse.com/security/cve/CVE-2026-47010"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272225 for CVE-2026-47010",
          "url": "https://bugzilla.suse.com/1272225"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-28T20:35:22Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-47010"
    },
    {
      "cve": "CVE-2026-47021",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-47021"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-47021",
          "url": "https://www.suse.com/security/cve/CVE-2026-47021"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272227 for CVE-2026-47021",
          "url": "https://bugzilla.suse.com/1272227"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-28T20:35:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-47021"
    },
    {
      "cve": "CVE-2026-47027",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-47027"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-47027",
          "url": "https://www.suse.com/security/cve/CVE-2026-47027"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272228 for CVE-2026-47027",
          "url": "https://bugzilla.suse.com/1272228"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-28T20:35:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-47027"
    },
    {
      "cve": "CVE-2026-47059",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-47059"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-47059",
          "url": "https://www.suse.com/security/cve/CVE-2026-47059"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272235 for CVE-2026-47059",
          "url": "https://bugzilla.suse.com/1272235"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-28T20:35:22Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-47059"
    },
    {
      "cve": "CVE-2026-47063",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-47063"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-47063",
          "url": "https://www.suse.com/security/cve/CVE-2026-47063"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272236 for CVE-2026-47063",
          "url": "https://bugzilla.suse.com/1272236"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-28T20:35:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-47063"
    },
    {
      "cve": "CVE-2026-60147",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-60147"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "unknown",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
          "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-60147",
          "url": "https://www.suse.com/security/cve/CVE-2026-60147"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272237 for CVE-2026-60147",
          "url": "https://bugzilla.suse.com/1272237"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-demo-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-devel-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-headless-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-javadoc-21.0.12.0-160000.1.1.noarch",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-jmods-21.0.12.0-160000.1.1.x86_64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.aarch64",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.s390x",
            "openSUSE Leap 16.0:java-21-openjdk-src-21.0.12.0-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-28T20:35:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-60147"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.