🛡️ openSUSE-SU-2026:20947-1 — java-21-openj9 (CVE-2026-22007 +27 more)

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Security update for java-21-openj9

This update for java-21-openj9 fixes the following issues:

Changes in java-21-openj9:

Make post scripts less noisy (bsc#1267355)
Use libalternatives instead of update-alternatives for

distributions where libalternatives is available

Update to OpenJDK 21.0.11 with OpenJ9 0.59.0 virtual machine
Including Oracle April 2026 CPU changes
CVE-2026-22007 (bsc#1262490), CVE-2026-22013 (bsc#1262494),

CVE-2026-22016 (bsc#1262495), CVE-2026-22018 (bsc#1262496),

CVE-2026-22021 (bsc#1262497), CVE-2026-23865 (bsc#1259118),

CVE-2026-34268 (bsc#1262500), CVE-2026-34282 (bsc#1262501)

OpenJ9 specific security fix
CVE-2026-1188 (bsc#1265261)
OpenJ9 changes, see

https://www.eclipse.org/openj9/docs/version0.59/

Update to OpenJDK 21.0.10 with OpenJ9 0.57.0 virtual machine
Including Oracle January 2026 CPU changes
CVE-2026-21925 (bsc#1257034), CVE-2026-21932 (bsc#1257036),

CVE-2026-21933 (bsc#1257037), CVE-2026-21945 (bsc#1257038)

OpenJ9 changes, see

https://www.eclipse.org/openj9/docs/version0.57/

Do not depend on update-desktop-files (jsc#PED-14507)
Update to OpenJDK 21.0.9 with OpenJ9 0.56.0 virtual machine
Including Oracle October 2025 CPU changes
CVE-2025-53057 (bsc#1252414), CVE-2025-53066 (bsc#1252417),

CVE-2025-61748 (bsc#1252418)

OpenJ9 changes, see

https://www.eclipse.org/openj9/docs/version0.56/

Update to OpenJDK 21.0.8 with OpenJ9 0.53.0 virtual machine
Including Oracle July 2025 CPU changes
CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),

CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)

OpenJ9 changes, see

https://www.eclipse.org/openj9/docs/version0.53/

Enable bootcycle build
Do not embed rebuild counter (bsc#1246806)
Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since

the C++ part is on -std=gnu++98, this is the closest.

Update to OpenJDK 21.0.7 with OpenJ9 0.51.0 virtual machine
Including Oracle April 2025 CPU changes
CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),

CVE-2025-30698 (bsc#1241276)

OpenJ9 changes, see

https://www.eclipse.org/openj9/docs/version0.51/

fix wrong execstack flag in libj9jit (bsc#1235844)
Update to OpenJDK 21.0.6 with OpenJ9 0.49.0 virtual machine
Including Oracle October 2024 and January 2025 CPU changes
CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),

CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),

CVE-2025-21502 (bsc#1236278)

OpenJ9 changes, see

https://www.eclipse.org/openj9/docs/version0.49/

Affected software

openSUSE-SU-2026:20947-1 is recorded against 1 package.

java-21-openj9 (fixed in 21.0.11.0-bp160.1.1)

Timeline and source

Published on 12 June 2026 and last revised on 13 June 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)

Details

Severity Unknown

CVSS Score N/A

CVSS Vector N/A

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2026-06-12

Updated 2026-08-20

Modified 2026-06-13

Fix URL N/A

Affected Packages

Software	From version	Fixed in
java-21-openj9	—	21.0.11.0-bp160.1.1

References

REPORT https://bugzilla.suse.com/1231702

REPORT https://bugzilla.suse.com/1231711

REPORT https://bugzilla.suse.com/1231716

REPORT https://bugzilla.suse.com/1231719

REPORT https://bugzilla.suse.com/1235844

REPORT https://bugzilla.suse.com/1236278

REPORT https://bugzilla.suse.com/1241274

REPORT https://bugzilla.suse.com/1241275

REPORT https://bugzilla.suse.com/1241276

REPORT https://bugzilla.suse.com/1246575

REPORT https://bugzilla.suse.com/1246584

REPORT https://bugzilla.suse.com/1246595

REPORT https://bugzilla.suse.com/1246598

REPORT https://bugzilla.suse.com/1246806

REPORT https://bugzilla.suse.com/1252414

REPORT https://bugzilla.suse.com/1252417

REPORT https://bugzilla.suse.com/1252418

REPORT https://bugzilla.suse.com/1257034

REPORT https://bugzilla.suse.com/1257036

REPORT https://bugzilla.suse.com/1257037

REPORT https://bugzilla.suse.com/1257038

REPORT https://bugzilla.suse.com/1259118

REPORT https://bugzilla.suse.com/1262490

REPORT https://bugzilla.suse.com/1262494

REPORT https://bugzilla.suse.com/1262495

REPORT https://bugzilla.suse.com/1262496

REPORT https://bugzilla.suse.com/1262497

REPORT https://bugzilla.suse.com/1262500

REPORT https://bugzilla.suse.com/1262501

REPORT https://bugzilla.suse.com/1265261

REPORT https://bugzilla.suse.com/1267355

WEB https://www.suse.com/security/cve/CVE-2024-21208

WEB https://www.suse.com/security/cve/CVE-2024-21210

WEB https://www.suse.com/security/cve/CVE-2024-21217

WEB https://www.suse.com/security/cve/CVE-2024-21235

WEB https://www.suse.com/security/cve/CVE-2025-21502

WEB https://www.suse.com/security/cve/CVE-2025-21587

WEB https://www.suse.com/security/cve/CVE-2025-30691

WEB https://www.suse.com/security/cve/CVE-2025-30698

WEB https://www.suse.com/security/cve/CVE-2025-30749

WEB https://www.suse.com/security/cve/CVE-2025-30754

WEB https://www.suse.com/security/cve/CVE-2025-50059

WEB https://www.suse.com/security/cve/CVE-2025-50106

WEB https://www.suse.com/security/cve/CVE-2025-53057

WEB https://www.suse.com/security/cve/CVE-2025-53066

WEB https://www.suse.com/security/cve/CVE-2025-61748

WEB https://www.suse.com/security/cve/CVE-2026-1188

WEB https://www.suse.com/security/cve/CVE-2026-21925

WEB https://www.suse.com/security/cve/CVE-2026-21932

WEB https://www.suse.com/security/cve/CVE-2026-21933

WEB https://www.suse.com/security/cve/CVE-2026-21945

WEB https://www.suse.com/security/cve/CVE-2026-22007

WEB https://www.suse.com/security/cve/CVE-2026-22013

WEB https://www.suse.com/security/cve/CVE-2026-22016

WEB https://www.suse.com/security/cve/CVE-2026-22018

WEB https://www.suse.com/security/cve/CVE-2026-22021

WEB https://www.suse.com/security/cve/CVE-2026-23865

WEB https://www.suse.com/security/cve/CVE-2026-34268

WEB https://www.suse.com/security/cve/CVE-2026-34282

🔗 NVD 🔗 Mitre

Similar Threats

Free Vulnerability Check

Is your site affected by openSUSE-SU-2026:20947-1?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against openSUSE-SU-2026:20947-1 and other known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.