Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u392 (icedtea-3.29.0) October 2023 CPU: - CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379). - CVE-2023-22081: Fixed certificate path validation issue during client authentication (bsc#1216374). - CVE-2015-4000: Fixed Logjam issue in SLES12SP5 (bsc#1211968).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u392 (icedtea-3.29.0) October 2023 CPU: - CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379). - CVE-2023-22081: Fixed certificate path validation issue during client authentication (bsc#1216374). - CVE-2015-4000: Fixed Logjam issue in SLES12SP5 (bsc#1211968).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1211968
- https://bugzilla.suse.com/1216374
- https://bugzilla.suse.com/1216379
- https://www.suse.com/security/cve/CVE-2015-4000
- https://www.suse.com/security/cve/CVE-2023-22067
- https://www.suse.com/security/cve/CVE-2023-22081
- https://www.suse.com/support/update/announcement/2023/suse-su-20234507-1/