FlawAtlas
Search the atlas
SUSE-SU-2022:0107-1 Not scored

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 7 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052) - CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914) - CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913) - CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911) - CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910) - CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909) - CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905) - CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564) - CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565) - CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055) - CVE-2021-35560: Fixed a vulnerability in the component Deployment. (bsc#1191902) - CVE-2021-35578: Fixed unexpected exception raised during TLS handshake. (bsc#1191904)

Exploit probability Not scored
Published January 18, 2022
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:HPE Helion OpenStack 8 java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3-BCL java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3-LTSS java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP4-LTSS java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP5 java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4 java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5 java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5 java-1_8_0-ibm
SUSE:OpenStack Cloud 8 java-1_8_0-ibm
SUSE:OpenStack Cloud 9 java-1_8_0-ibm
SUSE:OpenStack Cloud Crowbar 8 java-1_8_0-ibm
SUSE:OpenStack Cloud Crowbar 9 java-1_8_0-ibm

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2022:0107-1

This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 7 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052) - CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914) - CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913) - CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911) - CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910) - CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909) - CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905) - CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564) - CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565) - CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055) - CVE-2021-35560: Fixed a vulnerability in the component Deployment. (bsc#1191902) - CVE-2021-35578: Fixed unexpected exception raised during TLS handshake. (bsc#1191904)

View original source

05 / REFERENCES

Further evidence