SUSE-SU-2023:3305-1

    Dashboard / Vulnerabilities / SUSE-SU-2023:3305-1

    SUSE-SU-2023:3305-1

    Published: 14 Aug 2023Last Modified: 4 Feb 2026

    Summary: Security update for java-1_8_0-openj9

    Details: This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual machine. CVE-2023-21930: Unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1210628). CVE-2023-21937: Fixed vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). (bsc#1210631). CVE-2023-21938: Fixed vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (bsc#1210632). CVE-2023-21939: Fixed vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). (bsc#1210634). CVE-2023-21954: Fixed vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). (bsc#1210635). CVE-2023-21967: Fixed vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (bsc#1210636). CVE-2023-21968: Fixed ulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) (bsc#1210637). CVE-2023-2597: Fixed buffer overflow in shared cache implementation (bsc#1211615).

    References: https://www.suse.com/support/update/announcement/2023/suse-su-20233305-1/, https://bugzilla.suse.com/1210628, https://bugzilla.suse.com/1210631, https://bugzilla.suse.com/1210632, https://bugzilla.suse.com/1210634, https://bugzilla.suse.com/1210635, https://bugzilla.suse.com/1210636, https://bugzilla.suse.com/1210637, https://bugzilla.suse.com/1211615, https://www.suse.com/security/cve/CVE-2023-21930, https://www.suse.com/security/cve/CVE-2023-21937, https://www.suse.com/security/cve/CVE-2023-21938, https://www.suse.com/security/cve/CVE-2023-21939, https://www.suse.com/security/cve/CVE-2023-21954, https://www.suse.com/security/cve/CVE-2023-21967, https://www.suse.com/security/cve/CVE-2023-21968, https://www.suse.com/security/cve/CVE-2023-2597

    Affected packages

    Package

    Name: java-1_8_0-openj9

    Purl: pkg:rpm/suse/java-1_8_0-openj9&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -1.8.0.372-150200.3.33.2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2023:3305-1 | CVE-DB