Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 9,991 articles for you...
89
security advisorydenial of servicefedoraFedora 43 libwebsockets Important Denial of Service Update 2026-59fdef3e5
Fedora has released an update for libwebsockets, version 4.5.8, addressing various bugs and ensuring compatibility with OpenSSL 4.0, available via the dnf update program.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-59fdef3e5f 2026-07-27 01:12:03.303787+00:00 -------------------------------------------------------------------------------- Name : libwebsockets Product : Fedora 43 Version : 4.5.8 Release : 2.fc43 URL : http://libwebsockets.org Summary : Lightweight C library for Websockets Description : This is the libwebsockets C library for lightweight websocket clients and servers. -------------------------------------------------------------------------------- Update Information: Update to 4.5.8 -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 18 2026 Peter Robinson - 4.5.8-1 - Update to 4.5.8 * Thu Jul 16 2026 Fedora Release Engineering - 4.5.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz - 4.5.7-3 - Rebuilt for openssl 4.0 * Thu Apr 30 2026 Dmitry Belyavskiy - 4.5.7-2 - Migrated to OpenSSL 4.0: use ASN1_STRING accessors instead of direct struct access -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452084 - libwebsockets-4.5.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452084 [ 2 ] Bug #2487519 - CVE-2026-10650 libwebsockets: libwebsockets: Denial of Service via SSH Protocol Handler resource consumption [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2487519 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-59fdef3e5f' at the command line. For more information, refer to the dnf documentationavailable at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Important
Fedora
89
security advisoryfedoracriticalFedora 44 systemd Critical Bugfix Advisory 2026-230ba36543
Fedora 44 has released an update for systemd version 259.8, addressing bugs and security issues, and enhancing system management capabilities. Install via the dnf update command.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-230ba36543 2026-07-27 00:54:18.641585+00:00 -------------------------------------------------------------------------------- Name : systemd Product : Fedora 44 Version : 259.8 Release : 1.fc44 URL : https://systemd.io Summary : System and Service Manager Description : systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups, maintains mount and automount points, and implements an elaborate transactional dependency-based service control logic. systemd supports SysV and LSB init scripts and works as a replacement for sysvinit. Other parts of this package are a logging daemon, utilities to control basic system configuration like the hostname, date, locale, maintain a list of logged-in users, system accounts, runtime directories and settings, and a logging daemons. This package was built from the v259-stable branch of systemd. -------------------------------------------------------------------------------- Update Information: Latest upstream bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 25 2026 Zbigniew Jędrzejewski-Szmek - 259.8-1 - Version 259.8 - a bugfix release with correctness and security-relevant fixes too. 205 patches, so too much to describe here. -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-230ba36543' at the command line. Formore information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Discover the latest Fedora 44 systemd bugfix release addressing key security issues. Update to enhance system management.. Fedora 44, systemd, bugfix release, security update, service manager. . Severity: Critical. LinuxSecurity.com Team
Jul 26, 2026
•Critical
Fedora
89
security advisoryfedoraremote accessFedora 44 libgit2 Update 1.9.6 Security Fixes CVE-2026-53583 CVE-2026-53584
Fedora has released an update for libgit2 version 1.9.6, which includes fixes for multiple security issues, ensuring the package remains secure and reliable for users.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9d59721e9b 2026-07-27 00:54:18.641579+00:00 -------------------------------------------------------------------------------- Name : libgit2 Product : Fedora 44 Version : 1.9.6 Release : 1.fc44 URL : https://libgit2.org/ Summary : C implementation of the Git core methods as a library with a solid API Description : libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings. -------------------------------------------------------------------------------- Update Information: Update libgit2 to version 1.9.6. Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security issues, including - but not limited to: CVE-2026-53583 CVE-2026-53584 CVE-2026-53585 CVE-2026-53586 CVE-2026-53587 The Fedora package is not affected by GHSA-wfx7-g85r-q6vw since Fedora packages always linked the system PCRE2 and did not use the bundled PCRE. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 23 2026 Fabio Valentini - 1.9.6-1 - Update to version 1.9.6 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d59721e9b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the FedoraProject can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Critical
Fedora
89
security advisoryfedoraimportantFedora 44 rust-libgit2-sys Important Security Updates 2026-9d59721e9b
Fedora 44 has updated the rust-libgit2-sys package to version 0.18.7, addressing several security vulnerabilities while maintaining compatibility with system PCRE2, not using the bundled version.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9d59721e9b 2026-07-27 00:54:18.641579+00:00 -------------------------------------------------------------------------------- Name : rust-libgit2-sys Product : Fedora 44 Version : 0.18.7 Release : 1.fc44 URL : https://crates.io/crates/libgit2-sys Summary : Native bindings to the libgit2 library Description : Native bindings to the libgit2 library. -------------------------------------------------------------------------------- Update Information: Update libgit2 to version 1.9.6. Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security issues, including - but not limited to: CVE-2026-53583 CVE-2026-53584 CVE-2026-53585 CVE-2026-53586 CVE-2026-53587 The Fedora package is not affected by GHSA-wfx7-g85r-q6vw since Fedora packages always linked the system PCRE2 and did not use the bundled PCRE. -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 23 2026 Fabio Valentini - 0.18.7-1 - Update to version 0.18.7; Fixes RHBZ#2506308 * Fri Jul 17 2026 Fedora Release Engineering - 0.18.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d59721e9b' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can befound at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Important
Fedora
89
security advisoryfedoraimportantFedora 44 Lego Important Off-Path Poisoning Update 2026-30e8e9a2b2
Fedora has released a notification for updating the lego package to version 5.3.1, an ACME client in Go, addressing issue rhbz#2504092 and related security concerns.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-30e8e9a2b2 2026-07-27 00:54:18.641577+00:00 -------------------------------------------------------------------------------- Name : lego Product : Fedora 44 Version : 5.3.1 Release : 2.fc44 URL : https://github.com/go-acme/lego Summary : Let's Encrypt/ACME client written in Go Description : Let's Encrypt/ACME client written in Go. -------------------------------------------------------------------------------- Update Information: Update to 5.3.1 -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 21 2026 Packit - 5.3.1-1 - Update to 5.3.1 upstream release - Resolves: rhbz#2504092 * Thu Jul 16 2026 Fedora Release Engineering - 5.2.2-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2500376 - CVE-2026-10846 lego: ldns: Off-path poisoning attacks due to insufficient query-response matching [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2500376 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-30e8e9a2b2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Important
Fedora
89
security advisoryfedoraupdateFedora 44 Trafficserver DoS CVE-2026-59173 Update 2026-bb8dc1e5b6
Fedora 44 has released Traffic Server 10.1.3, enhancing performance and resolving security vulnerabilities, including a DoS issue in HTTP/2 and various other bug fixes and improvements.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-bb8dc1e5b6 2026-07-27 00:54:18.641567+00:00 -------------------------------------------------------------------------------- Name : trafficserver Product : Fedora 44 Version : 10.1.3 Release : 1.fc44 URL : https://trafficserver.apache.org/ Summary : Fast, scalable and extensible HTTP/1.1 and HTTP/2 caching proxy server Description : Traffic Server is a high-performance building block for cloud services. It's more than just a caching proxy server; it also has support for plugins to build large scale web applications. Key features: Caching - Improve your response time, while reducing server load and bandwidth needs by caching and reusing frequently-requested web pages, images, and web service calls. Proxying - Easily add keep-alive, filter or anonymize content requests, or add load balancing by adding a proxy layer. Fast - Scales well on modern SMP hardware, handling 10s of thousands of requests per second. Extensible - APIs to write your own plug-ins to do anything from modifying HTTP headers to handling ESI requests to writing your own cache algorithm. Proven - Handling over 400TB a day at Yahoo! both as forward and reverse proxies, Apache Traffic Server is battle hardened. -------------------------------------------------------------------------------- Update Information: Resolves CVE-2026-59173 - DoS vulnerability in HTTP/2 via stalled flow-control Additional Changes with Apache Traffic Server 9.2.14 #12910 - Fix connection-level window mismatch causing 408/504 timeouts #13266 - Add Claude Code project guide for the 9.2.x branch #13267 - [9.2.x] Backport format scripts fixes #13377 - 9.2.x: http2: Track scheduledevents Additional Changes with Apache Traffic Server 10.1.3 #12192 - Return a 400 on chunk parse errors #12733 - Fix retry logic for TSHttpTxnServerAddrSet (issue #12611) #12854 - Fix LoadedPlugins::remove crash during static destruction #12855 - Fix header_rewrite run-plugin relative path resolution #12857 - Fix autest compatibility with Fedora 43 / Python 3.14 #12943 - Address incompatibility with BoringSSL #12959 - Fix crash in HttpSM::tunnel_handler on unhandled VC events #12972 - Fix cache retry assert on ServerAddrSet #12990 - Update to Proxy Verifier v3.0.0 #13008 - cmake: limit GENERAL_NAME bssl probe #13020 - Align AuTests with latest proxy-verifier checks (#12986) #13025 - hrw: Refix loading geodb files #13033 - tests/gold_tests/headers tests: use ATSReplayTest #13113 - slice: Fix crash caused by use-after-free #13114 - Fix bg fill teardown crash in update_size_and_time_stats #13138 - Remove cache alternate vector detach #13144 - Fix XPACK relative index underflow #13162 - hrw: Fix an index bug in run plugin operator #13177 - Correct records.yaml record drift #13178 - 10.1.x: proxy.config.dns.search_default_domains: allow 2 #13182 - Stabilize parallel AuTest helpers #13192 - yaml-cpp-0.9.0 #13193 - GCC 16: Regex header integer includes #13198 - Fedora 44 test fixes #13200 - Single source of truth for Proxy Verifier metadata #13217 - Proxy Verifier v3.1.3 #13218 - Fix hdrHeap/hdrStrHeap allocator inuse metric underflow #13220 - Fix flaky Fedora 44 AuTest helpers #13223 - Fix mismatched sINT/dINT log field types #13252 - cache: apply per-volume settings on first start after clear #13256 - Fix mismatched log field types more #13261 - header_rewrite: Improve URL Error messages #13263 - Fix bounds check in CacheVC::scanObject #13264 - Handle OpenSSL without dynamic ENGINE #13280 - Enable probes in Fedora C++20 CI #13293 - ProxyProtocol: free pp_info heap on NetVConnection recycle #13294 - Fixpending HostDB DNS queue removal race #13295 - Fix server entry cleanup after request tunnel setup #13297 - 10.1.x: Add sni.yaml session ticket overrides (#13006) #13303 - header_rewrite: Fix a leak and truncation in set-body-from #13307 - dns: destruct HostEnt on free to fix SRV vector leak #13318 - TLS: Fix memory leaks in cert load and OCSP stapling #13325 - HttpSM.cc: fix cache read end milestone order #13336 - 10.1.x: Fix redirected cache write without write VC #13365 - 10.1.x: USDT: normalize names for STATE_ENTER #13366 - 10.1.x: Fix set-status crash inside if/endif at remap time #13387 - Hard-enforce max_active_streams_in at HTTP/2 stream creation -------------------------------------------------------------------------------- ChangeLog: * Wed Jul 15 2026 Jered Floyd - 10.1.3-1 - Update to upstream 10.1.3 * Fri Jun 12 2026 Yaakov Selkowitz - 10.1.2-2 - Rebuilt for openssl 4.0 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2501029 - trafficserver-10.1.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2501029 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-bb8dc1e5b6' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Important
Fedora
89
security advisorydenial of servicefedoraFedora 44 libwebsockets High Risk DoS Patch 2026-9921e0e415
Fedora 44 has released libwebsockets version 4.5.8, a lightweight C library for Websockets, which includes important updates and fixes for recent vulnerabilities.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9921e0e415 2026-07-27 00:54:18.641550+00:00 -------------------------------------------------------------------------------- Name : libwebsockets Product : Fedora 44 Version : 4.5.8 Release : 1.fc44 URL : http://libwebsockets.org Summary : Lightweight C library for Websockets Description : This is the libwebsockets C library for lightweight websocket clients and servers. -------------------------------------------------------------------------------- Update Information: Update to 4.5.8 -------------------------------------------------------------------------------- ChangeLog: * Sat Jul 18 2026 Peter Robinson - 4.5.8-1 - Update to 4.5.8 * Thu Jul 16 2026 Fedora Release Engineering - 4.5.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild * Fri Jun 12 2026 Yaakov Selkowitz - 4.5.7-3 - Rebuilt for openssl 4.0 * Thu Apr 30 2026 Dmitry Belyavskiy - 4.5.7-2 - Migrated to OpenSSL 4.0: use ASN1_STRING accessors instead of direct struct access * Wed Mar 18 2026 Peter Robinson - 4.5.7-1 - Update to 4.5.7 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2452084 - libwebsockets-4.5.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=2452084 [ 2 ] Bug #2487519 - CVE-2026-10650 libwebsockets: libwebsockets: Denial of Service via SSH Protocol Handler resource consumption [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2487519 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9921e0e415' at the command line. Formore information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jul 26, 2026
•Critical
Fedora
202
security advisorydenial of serviceimportantopenSUSE Java-17-OpenJDK Important Denial of Service Fix 2026-21440-1
openSUSE has released a security update for java-17-openjdk addressing nine vulnerabilities and includes bug fixes, with installation methods recommended through YaST online_update or zypper patch.. openSUSE security update: security update for java-17-openjdk ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21440-1 Rating: important References: * bsc#1264994 * bsc#1272223 * bsc#1272224 * bsc#1272225 * bsc#1272227 * bsc#1272228 * bsc#1272235 * bsc#1272236 * bsc#1272237 Cross-References: * CVE-2026-41254 * CVE-2026-46917 * CVE-2026-46968 * CVE-2026-47010 * CVE-2026-47021 * CVE-2026-47027 * CVE-2026-47059 * CVE-2026-47063 * CVE-2026-60147 CVSS scores: * CVE-2026-41254 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41254 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-46917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-46917 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-46968 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-46968 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-47010 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-47010 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-47021 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-47021 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-47027 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-47027 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-47059 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-47059 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-47063 ( SUSE ): 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-47063 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-60147 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-60147 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves 9 vulnerabilities and has 9 bug fixes can now be installed. Description: This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 (July 2026 CPU) - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994). - CVE-2026-46917: partial denial of service via TLS (bsc#1272223). - CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224). - CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225). - CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227). - CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228). - CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235). - CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236). - CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1344=1 Package List: - openSUSE Leap 16.0: java-17-openjdk-17.0.20.0-160000.1.1 java-17-openjdk-demo-17.0.20.0-160000.1.1 java-17-openjdk-devel-17.0.20.0-160000.1.1 java-17-openjdk-headless-17.0.20.0-160000.1.1 java-17-openjdk-javadoc-17.0.20.0-160000.1.1 java-17-openjdk-jmods-17.0.20.0-160000.1.1 java-17-openjdk-src-17.0.20.0-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2026-41254.html * https://www.suse.com/security/cve/CVE-2026-46917.html * https://www.suse.com/security/cve/CVE-2026-46968.html * https://www.suse.com/security/cve/CVE-2026-47010.html * https://www.suse.com/security/cve/CVE-2026-47021.html * https://www.suse.com/security/cve/CVE-2026-47027.html * https://www.suse.com/security/cve/CVE-2026-47059.html * https://www.suse.com/security/cve/CVE-2026-47063.html * https://www.suse.com/security/cve/CVE-2026-60147.html . An important openSUSE advisory fixes 9 vulnerabilities in java-17-openjdk with critical updates and patch instructions.. openSUSE security update, java 17 vulnerabilities, software patching. . Severity: Important. LinuxSecurity.com Team
Jul 26, 2026
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!