Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.18+8 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and JavaFX (bsc#1257036). - CVE-2026-21933: Fixed Oracle Java SE component Networking (bsc#1257037). - CVE-2026-21945: Fixed Oracle Java SE component Security (bsc#1257038). Other fixes: - OpenJDK rendering blue borders when it should not, due to missing the fix for JDK-6304250 from upstream (bsc#1255446). - Do not depend on update-desktop-files (jsc#PED-14507, jsc#PED-15216).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.18+8 (January 2026 CPU) Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034). - CVE-2026-21932: Fixed Oracle Java SE component AWT and JavaFX (bsc#1257036). - CVE-2026-21933: Fixed Oracle Java SE component Networking (bsc#1257037). - CVE-2026-21945: Fixed Oracle Java SE component Security (bsc#1257038). Other fixes: - OpenJDK rendering blue borders when it should not, due to missing the fix for JDK-6304250 from upstream (bsc#1255446). - Do not depend on update-desktop-files (jsc#PED-14507, jsc#PED-15216).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1255446
- https://bugzilla.suse.com/1257034
- https://bugzilla.suse.com/1257036
- https://bugzilla.suse.com/1257037
- https://bugzilla.suse.com/1257038
- https://www.suse.com/security/cve/CVE-2026-21925
- https://www.suse.com/security/cve/CVE-2026-21932
- https://www.suse.com/security/cve/CVE-2026-21933
- https://www.suse.com/security/cve/CVE-2026-21945