SUSE-SU-2022:0108-1

    Dashboard / Vulnerabilities / SUSE-SU-2022:0108-1

    SUSE-SU-2022:0108-1

    Published: 18 Jan 2022Last Modified: 4 Feb 2026

    Summary: Security update for java-1_8_0-ibm

    Details: This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 7 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. (bsc#1194198, bsc#1192052) - CVE-2021-35586: Excessive memory allocation in BMPImageReader. (bsc#1191914) - CVE-2021-35564: Certificates with end dates too far in the future can corrupt keystore. (bsc#1191913) - CVE-2021-35559: Excessive memory allocation in RTFReader. (bsc#1191911) - CVE-2021-35556: Excessive memory allocation in RTFParser. (bsc#1191910) - CVE-2021-35565: Loop in HttpsServer triggered during TLS session close. (bsc#1191909) - CVE-2021-35588: Incomplete validation of inner class references in ClassFileParser. (bsc#1191905) - CVE-2021-2341: Fixed a flaw inside the FtpClient. (bsc#1188564) - CVE-2021-2369: JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565) - CVE-2021-2163: Incomplete enforcement of JAR signing disabled algorithms. (bsc#1185055) - CVE-2021-35560: Fixed a vulnerability in the component Deployment. (bsc#1191902) - CVE-2021-35578: Fixed unexpected exception raised during TLS handshake. (bsc#1191904)

    References: https://www.suse.com/support/update/announcement/2022/suse-su-20220108-1/, https://bugzilla.suse.com/1185055, https://bugzilla.suse.com/1188564, https://bugzilla.suse.com/1188565, https://bugzilla.suse.com/1191902, https://bugzilla.suse.com/1191904, https://bugzilla.suse.com/1191905, https://bugzilla.suse.com/1191909, https://bugzilla.suse.com/1191910, https://bugzilla.suse.com/1191911, https://bugzilla.suse.com/1191913, https://bugzilla.suse.com/1191914, https://bugzilla.suse.com/1192052, https://bugzilla.suse.com/1194198, https://bugzilla.suse.com/1194232, https://www.suse.com/security/cve/CVE-2021-2163, https://www.suse.com/security/cve/CVE-2021-2341, https://www.suse.com/security/cve/CVE-2021-2369, https://www.suse.com/security/cve/CVE-2021-35556, https://www.suse.com/security/cve/CVE-2021-35559, https://www.suse.com/security/cve/CVE-2021-35560, https://www.suse.com/security/cve/CVE-2021-35564, https://www.suse.com/security/cve/CVE-2021-35565, https://www.suse.com/security/cve/CVE-2021-35578, https://www.suse.com/security/cve/CVE-2021-35586, https://www.suse.com/security/cve/CVE-2021-35588, https://www.suse.com/security/cve/CVE-2021-41035

    Affected packages

    Package

    Name: java-1_8_0-ibm

    Purl: pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.8.0_sr7.0-3.53.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2022:0108-1 | CVE-DB