Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u332 - April 2022 CPU (icedtea-3.23.0) - CVE-2022-21426: Better XPath expression handling (bsc#1198672) - CVE-2022-21443: Improved Object Identification (bsc#1198675) - CVE-2022-21434: Better invocation handler handling (bsc#1198674) - CVE-2022-21476: Improve Santuario processing (bsc#1198671) - CVE-2022-21496: Improve URL supports (bsc#1198673) And further Security fixes, Import of OpenJDK 8 u332, Backports and Bug fixes.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u332 - April 2022 CPU (icedtea-3.23.0) - CVE-2022-21426: Better XPath expression handling (bsc#1198672) - CVE-2022-21443: Improved Object Identification (bsc#1198675) - CVE-2022-21434: Better invocation handler handling (bsc#1198674) - CVE-2022-21476: Improve Santuario processing (bsc#1198671) - CVE-2022-21496: Improve URL supports (bsc#1198673) And further Security fixes, Import of OpenJDK 8 u332, Backports and Bug fixes.
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1198671
- https://bugzilla.suse.com/1198672
- https://bugzilla.suse.com/1198673
- https://bugzilla.suse.com/1198674
- https://bugzilla.suse.com/1198675
- https://www.suse.com/security/cve/CVE-2022-21426
- https://www.suse.com/security/cve/CVE-2022-21434
- https://www.suse.com/security/cve/CVE-2022-21443
- https://www.suse.com/security/cve/CVE-2022-21476
- https://www.suse.com/security/cve/CVE-2022-21496
- https://www.suse.com/support/update/announcement/2022/suse-su-20222530-1/