Lucene search

K
suseSuseOPENSUSE-SU-2022:0870-1
HistoryMar 16, 2022 - 12:00 a.m.

Security update for java-1_8_0-openj9 (important)

2022-03-1600:00:00
lists.opensuse.org
37

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

An update that fixes 14 vulnerabilities is now available.

Description:

This update for java-1_8_0-openj9 fixes the following issues:

Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0:

  • Fixing the following vulnerabilities: CVE-2022-21248 (bsc#1194926),
    CVE-2022-21277 (bsc#1194930), CVE-2022-21282 (bsc#1194933),
    CVE-2022-21291 (bsc#1194925), CVE-2022-21293 (bsc#1194935),
    CVE-2022-21294 (bsc#1194934), CVE-2022-21296 (bsc#1194932),
    CVE-2022-21299 (bsc#1194931), CVE-2022-21305 (bsc#1194939),
    CVE-2022-21340 (bsc#1194940), CVE-2022-21341 (bsc#1194941),
    CVE-2022-21360 (bsc#1194929), CVE-2022-21365 (bsc#1194928),
    CVE-2022-21366 (bsc#1194927).

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.4:

    zypper in -t patch openSUSE-SLE-15.4-2022-870=1

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2022-870=1

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P