Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u322 (icedtea-3.22.0) Including the following security fixes: - CVE-2022-21248, bsc#1194926: Enhance cross VM serialization - CVE-2022-21283, bsc#1194937: Better String matching - CVE-2022-21293, bsc#1194935: Improve String constructions - CVE-2022-21294, bsc#1194934: Enhance construction of Identity maps - CVE-2022-21282, bsc#1194933: Better resolution of URIs - CVE-2022-21296, bsc#1194932: Improve SAX Parser configuration management - CVE-2022-21299, bsc#1194931: Improved scanning of XML entities - CVE-2022-21305, bsc#1194939: Better array indexing - CVE-2022-21340, bsc#1194940: Verify Jar Verification - CVE-2022-21341, bsc#1194941: Improve serial forms for transport - CVE-2022-21349: Improve Solaris font rendering - CVE-2022-21360, bsc#1194929: Enhance BMP image support - CVE-2022-21365, bsc#1194928: Enhanced BMP processing
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u322 (icedtea-3.22.0) Including the following security fixes: - CVE-2022-21248, bsc#1194926: Enhance cross VM serialization - CVE-2022-21283, bsc#1194937: Better String matching - CVE-2022-21293, bsc#1194935: Improve String constructions - CVE-2022-21294, bsc#1194934: Enhance construction of Identity maps - CVE-2022-21282, bsc#1194933: Better resolution of URIs - CVE-2022-21296, bsc#1194932: Improve SAX Parser configuration management - CVE-2022-21299, bsc#1194931: Improved scanning of XML entities - CVE-2022-21305, bsc#1194939: Better array indexing - CVE-2022-21340, bsc#1194940: Verify Jar Verification - CVE-2022-21341, bsc#1194941: Improve serial forms for transport - CVE-2022-21349: Improve Solaris font rendering - CVE-2022-21360, bsc#1194929: Enhance BMP image support - CVE-2022-21365, bsc#1194928: Enhanced BMP processing
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1193314
- https://bugzilla.suse.com/1193444
- https://bugzilla.suse.com/1193491
- https://bugzilla.suse.com/1194926
- https://bugzilla.suse.com/1194928
- https://bugzilla.suse.com/1194929
- https://bugzilla.suse.com/1194931
- https://bugzilla.suse.com/1194932
- https://bugzilla.suse.com/1194933
- https://bugzilla.suse.com/1194934
- https://bugzilla.suse.com/1194935
- https://bugzilla.suse.com/1194937
- https://bugzilla.suse.com/1194939
- https://bugzilla.suse.com/1194940
- https://bugzilla.suse.com/1194941
- https://bugzilla.suse.com/1195163
- https://www.suse.com/security/cve/CVE-2022-21248
- https://www.suse.com/security/cve/CVE-2022-21282
- https://www.suse.com/security/cve/CVE-2022-21283
- https://www.suse.com/security/cve/CVE-2022-21293
- https://www.suse.com/security/cve/CVE-2022-21294
- https://www.suse.com/security/cve/CVE-2022-21296
- https://www.suse.com/security/cve/CVE-2022-21299
- https://www.suse.com/security/cve/CVE-2022-21305
- https://www.suse.com/security/cve/CVE-2022-21340
- https://www.suse.com/security/cve/CVE-2022-21341
- https://www.suse.com/security/cve/CVE-2022-21349
- https://www.suse.com/security/cve/CVE-2022-21360
- https://www.suse.com/security/cve/CVE-2022-21365
- https://www.suse.com/support/update/announcement/2022/suse-su-20220871-1/