Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual machine - CVE-2023-22067: Fixed an IOR deserialization issue in CORBA (bsc#1216379). - CVE-2023-22081: Fixed a certificate path validation issue during client authentication (bsc#1216374). - CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual machine - CVE-2023-22067: Fixed an IOR deserialization issue in CORBA (bsc#1216379). - CVE-2023-22081: Fixed a certificate path validation issue during client authentication (bsc#1216374). - CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1216374
- https://bugzilla.suse.com/1216379
- https://bugzilla.suse.com/1217214
- https://www.suse.com/security/cve/CVE-2023-22067
- https://www.suse.com/security/cve/CVE-2023-22081
- https://www.suse.com/security/cve/CVE-2023-5676
- https://www.suse.com/support/update/announcement/2023/suse-su-20234612-1/