The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20947-1 advisory.

    Changes in java-21-openj9:

    - Make post scripts less noisy (bsc#1267355)

    - Use libalternatives instead of update-alternatives for       distributions where libalternatives is available

    - Update to OpenJDK 21.0.11 with OpenJ9 0.59.0 virtual machine
    - Including Oracle April 2026 CPU changes
      * CVE-2026-22007 (bsc#1262490), CVE-2026-22013 (bsc#1262494),         CVE-2026-22016 (bsc#1262495), CVE-2026-22018 (bsc#1262496),         CVE-2026-22021 (bsc#1262497), CVE-2026-23865 (bsc#1259118),         CVE-2026-34268 (bsc#1262500), CVE-2026-34282 (bsc#1262501)
    - OpenJ9 specific security fix
      * CVE-2026-1188 (bsc#1265261)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.59/

    - Update to OpenJDK 21.0.10 with OpenJ9 0.57.0 virtual machine
    - Including Oracle January 2026 CPU changes
      * CVE-2026-21925 (bsc#1257034), CVE-2026-21932 (bsc#1257036),         CVE-2026-21933 (bsc#1257037), CVE-2026-21945 (bsc#1257038)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.57/

    - Do not depend on update-desktop-files (jsc#PED-14507)

    - Update to OpenJDK 21.0.9 with OpenJ9 0.56.0 virtual machine
    - Including Oracle October 2025 CPU changes
      * CVE-2025-53057 (bsc#1252414), CVE-2025-53066 (bsc#1252417),         CVE-2025-61748 (bsc#1252418)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.56/

    - Update to OpenJDK 21.0.8 with OpenJ9 0.53.0 virtual machine
    - Including Oracle July 2025 CPU changes
      * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),         CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.53/
    - Enable bootcycle build

    - Do not embed rebuild counter (bsc#1246806)

    - Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since       the C++ part is on -std=gnu++98, this is the closest.

    - Update to OpenJDK 21.0.7 with OpenJ9 0.51.0 virtual machine
    - Including Oracle April 2025 CPU changes
      * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),         CVE-2025-30698 (bsc#1241276)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.51/

    - fix wrong execstack flag in libj9jit (bsc#1235844)

    - Update to OpenJDK 21.0.6 with OpenJ9 0.49.0 virtual machine
    - Including Oracle October 2024 and January 2025 CPU changes
      * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),         CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),         CVE-2025-21502 (bsc#1236278)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.49/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20943-1 advisory.

    Changes in java-17-openj9:

    - Make post scripts less noisy (bsc#1267355)

    - Use libalternatives instead of update-alternatives for       distributions where libalternatives is available

    - Update to OpenJDK 17.0.19 with OpenJ9 0.59.0 virtual machine
    - Including Oracle April 2026 CPU changes
      * CVE-2026-22007 (bsc#1262490), CVE-2026-22013 (bsc#1262494),         CVE-2026-22016 (bsc#1262495), CVE-2026-22018 (bsc#1262496),         CVE-2026-22021 (bsc#1262497), CVE-2026-23865 (bsc#1259118),         CVE-2026-34268 (bsc#1262500), CVE-2026-34282 (bsc#1262501)
    - OpenJ9 specific security fix
      * CVE-2026-1188 (bsc#1265261)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.59/

    - Update to OpenJDK 17.0.18 with OpenJ9 0.57.0 virtual machine
    - Including Oracle January 2026 CPU changes
      * CVE-2026-21925 (bsc#1257034), CVE-2026-21932 (bsc#1257036),         CVE-2026-21933 (bsc#1257037), CVE-2026-21945 (bsc#1257038)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.57/

    - Do not depend on update-desktop-files (jsc#PED-14507)

    - Update to OpenJDK 17.0.17 with OpenJ9 0.56.0 virtual machine
    - Including Oracle October 2025 CPU changes
      * CVE-2025-53057 (bsc#1252414), CVE-2025-53066 (bsc#1252417)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.56/

    - Update to OpenJDK 17.0.16 with OpenJ9 0.53.0 virtual machine
    - Including Oracle July 2025 CPU changes
      * CVE-2025-30749 (bsc#1246595), CVE-2025-30754 (bsc#1246598),         CVE-2025-50059 (bsc#1246575), CVE-2025-50106 (bsc#1246584)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.53/
    - Enable bootcycle build

    - Do not embed rebuild counter (bsc#1246806)

    - Add -std=gnu99 to CFLAGS to fix gcc15 compile time error. Since       the C++ part is on -std=gnu++98, this is the closest.
    - Added patch:
      * fix-build-with-gcc15.patch
        - fix a typo in omr that is fatal with gcc15

    - Update to OpenJDK 17.0.15 with OpenJ9 0.51.0 virtual machine
    - Including Oracle April 2025 CPU changes
      * CVE-2025-21587 (bsc#1241274), CVE-2025-30691 (bsc#1241275),         CVE-2025-30698 (bsc#1241276)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.51/

    - fix wrong execstack flag in libj9jit (bsc#1235844)

    - Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine
    - Including Oracle October 2024 and January 2025 CPU changes
      * CVE-2024-21208 (bsc#1231702), CVE-2024-21210 (bsc#1231711),         CVE-2024-21217 (bsc#1231716), CVE-2024-21235 (bsc#1231719),         CVE-2025-21502 (bsc#1236278)
      * OpenJ9 changes, see         https://www.eclipse.org/openj9/docs/version0.49/

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
321009	openSUSE 16 Security Update : java-21-openj9 (openSUSE-SU-2026:20947-1)	Nessus	SuSE Local Security Checks	6/14/2026	6/14/2026	medium
321003	openSUSE 16 Security Update : java-17-openj9 (openSUSE-SU-2026:20943-1)	Nessus	SuSE Local Security Checks	6/14/2026	6/14/2026	medium

Detections

Analytics

Plugins Search

medium

medium