java-21-openj9-21.0.11.0-1.1 on GA media (moderate)

java-21-openj9-21.0.11.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10727-1 Rating: moderate Cross-References: CVE-2026-22007 CVE-2026-22016 CVE-2026-22021 CVE-2026-34268 CVSS scores: CVE-2026-22007 SUSE : 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-22007 SUSE : 2.1...

java-17-openj9-17.0.19.0-1.1 on GA media (moderate)

java-17-openj9-17.0.19.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10725-1 Rating: moderate Cross-References: CVE-2026-22007 CVE-2026-22016 CVE-2026-22021 CVE-2026-34268 CVSS scores: CVE-2026-22007 SUSE : 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-22007 SUSE : 2.1...

java-11-openj9-11.0.31.0-1.1 on GA media (moderate)

java-11-openj9-11.0.31.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10724-1 Rating: moderate Cross-References: CVE-2026-22007 CVE-2026-22016 CVE-2026-22021 CVE-2026-34268 CVSS scores: CVE-2026-22007 SUSE : 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-22007 SUSE : 2.1...

OPENSUSE-SU-2026:10725-1 java-17-openj9-17.0.19.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.19.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10728-1 java-25-openj9-25.0.3.0-1.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10726-1 java-1_8_0-openj9-1.8.0.492-1.1 on GA media

These are all security issues fixed in the java-180-openj9-1.8.0.492-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10724-1 java-11-openj9-11.0.31.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.31.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10727-1 java-21-openj9-21.0.11.0-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.11.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-6918

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message...

CVE-2026-6918

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message...

UBUNTU-CVE-2026-6918

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message...

EUVD-2026-27315

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message...

CVE-2026-6918

CVE-2026-6918 affects Eclipse OpenJ9/JITServer. Versions 0.21–0.58 are vulnerable to a pre-auth remote crash triggered by a 32-byte crafted TCP message. The description does not provide exploit details or remediation. No further concrete impact or patch information is available in the connected d...

CVE-2026-6918

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message...

CVE-2026-6918

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message...

Eclipse OpenJ9 缓冲区错误漏洞

Eclipse OpenJ9 is a Java application engine developed by the Eclipse Foundation. This product is primarily used for running Java applications. Versions of Eclipse OpenJ9 from 0.21 to 0.58 contain a buffer error vulnerability. This vulnerability allows pre-authenticated remote attackers to cause t...

PT-2026-37037

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message...

Security Bulletin: SOAR App Host is using a component with a known vulnerability (CVE-2026-1188)

Summary IBM SOAR App Host uses an older version of the OMR component in OpenJ9 JVM that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 1.15.7.0 Vulnerability Details CVEID:CVE-2026-1188 DESCRIPTIO...

Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-1188)

Summary IBM Security SOAR uses an older version of the OMR component in OpenJ9 JVM that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 51.0.9.0 Vulnerability Details CVEID:CVE-2026-1188 DESCRIPTIO...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows

Summary There are multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows. All platforms are affected, and all previous versions may also be affected. Vulnerability Details CVEID:CVE-2024-3933 DESCRIPTION: In Eclipse OpenJ9 release versions prior to 0.44...