Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 15: * Oracle October 17 2023 CPU [bsc#1216640] Security fixes: - CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374) - CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379) - CVE-2023-22025: Fixed memory corruption issue on x86_64 with AVX-512 (bsc#1216339) - CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214) Bug fixes: - IBM Java idlj compiler switch definition because IBM java idlj seems to confuse char and wchar for typedef types (bsc#1204264).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 15: * Oracle October 17 2023 CPU [bsc#1216640] Security fixes: - CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374) - CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379) - CVE-2023-22025: Fixed memory corruption issue on x86_64 with AVX-512 (bsc#1216339) - CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214) Bug fixes: - IBM Java idlj compiler switch definition because IBM java idlj seems to confuse char and wchar for typedef types (bsc#1204264).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1204264
- https://bugzilla.suse.com/1216339
- https://bugzilla.suse.com/1216374
- https://bugzilla.suse.com/1216379
- https://bugzilla.suse.com/1216640
- https://bugzilla.suse.com/1217214
- https://www.suse.com/security/cve/CVE-2023-22025
- https://www.suse.com/security/cve/CVE-2023-22067
- https://www.suse.com/security/cve/CVE-2023-22081
- https://www.suse.com/security/cve/CVE-2023-5676
- https://www.suse.com/support/update/announcement/2023/suse-su-20234614-1/