SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-2707

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2022-2707

Security update for java-11-openjdk

Type: security

Severity: important

Issued: 2022-08-09

Description:

This update for java-11-openjdk fixes the following issues:

Update to upstream tag jdk-11.0.16+8 (July 2022 CPU)

- CVE-2022-21540: Improve class compilation (bsc#1201694)
- CVE-2022-21541: Enhance MethodHandle invocations (bsc#1201692)
- CVE-2022-34169: Improve Xalan supports (bsc#1201684)

References

CVE: CVE-2022-34169
CVE: CVE-2022-21541
CVE: CVE-2022-21540
Bugzilla: 1201694 VUL-0: CVE-2022-21540: java,openjdk: class compilation issue
Bugzilla: 1201692 VUL-0: CVE-2022-21541: java,openjdk: improper restriction of MethodHandle.invokeBasic()
Bugzilla: 1201684 VUL-0: CVE-2022-34169: java,openjdk: integer truncation issue in Xalan

Packages

java-11-openjdk-11.0.16.0-150000.3.83.1