SUSE-SU-2022:4452-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:4452-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2022:4452-1
- Related
- Published
- 2022-12-13T10:35:47Z
- Modified
- 2022-12-13T10:35:47Z
- Summary
- Security update for java-1_8_0-openjdk
- Details
-
This update for java-180-openjdk fixes the following issues:
Update to version jdk8u352 (icedtea-3.25.0):
- CVE-2022-21619,CVE-2022-21624: Fixed difficult to exploit vulnerability allows unauthenticated attacker with network access and can cause unauthorized update, insert or delete access via multiple protocols (bsc#1204473,bsc#1204475).
- CVE-2022-21626: Fixed easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to cause partial denial of service (bsc#1204471).
- CVE-2022-21628: Fixed easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to cause partial denial of service (bsc#1204472).
- References
-
- https://www.suse.com/support/update/announcement/2022/suse-su-20224452-1/
- https://bugzilla.suse.com/1204471
- https://bugzilla.suse.com/1204472
- https://bugzilla.suse.com/1204473
- https://bugzilla.suse.com/1204475
- https://www.suse.com/security/cve/CVE-2022-21619
- https://www.suse.com/security/cve/CVE-2022-21624
- https://www.suse.com/security/cve/CVE-2022-21626
- https://www.suse.com/security/cve/CVE-2022-21628
Affected packages
SUSE:Linux Enterprise Module for Legacy 15 SP3 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP3
SUSE:Linux Enterprise Module for Legacy 15 SP4 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP4
SUSE:Linux Enterprise Server 15-LTSS / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS
SUSE:Linux Enterprise Server 15 SP1-BCL / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL
SUSE:Linux Enterprise Server 15 SP1-LTSS / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS
SUSE:Linux Enterprise Server 15 SP2-LTSS / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS
SUSE:Linux Enterprise Server for SAP Applications 15 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015
SUSE:Linux Enterprise Server for SAP Applications 15 SP1 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1
SUSE:Linux Enterprise Server for SAP Applications 15 SP2 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2
SUSE:Manager Proxy 4.1 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Manager%20Proxy%204.1
SUSE:Manager Retail Branch Server 4.1 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1
SUSE:Manager Server 4.1 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Manager%20Server%204.1
SUSE:Enterprise Storage 6 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Enterprise%20Storage%206
SUSE:Enterprise Storage 7 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=SUSE%20Enterprise%20Storage%207
openSUSE:Leap 15.3 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=openSUSE%20Leap%2015.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.352-150000.3.73.1
Ecosystem specific
{
"binaries": [
{
"java-1_8_0-openjdk": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-devel": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-src": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-demo": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-javadoc": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-accessibility": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-headless": "1.8.0.352-150000.3.73.1"
}
]
}
openSUSE:Leap 15.4 / java-1_8_0-openjdk
Package
- Name
- java-1_8_0-openjdk
- Purl
- purl:rpm/suse/java-1_8_0-openjdk&distro=openSUSE%20Leap%2015.4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.0.352-150000.3.73.1
Ecosystem specific
{
"binaries": [
{
"java-1_8_0-openjdk": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-devel": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-src": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-demo": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-javadoc": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-accessibility": "1.8.0.352-150000.3.73.1",
"java-1_8_0-openjdk-headless": "1.8.0.352-150000.3.73.1"
}
]
}