{"schemaVersion":3,"id":"OPENSUSE-SU-2022:0816-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for java-11-openjdk\n\nThis update for java-11-openjdk fixes the following issues:\n\n- CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. (bnc#1194926)\n- CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. (bnc#1194930)\n- CVE-2022-21282: Fixed Insufficient URI checks in the XSLT TransformerImpl. (bnc#1194933)\n- CVE-2022-21283: Fixed unexpected exception thrown in regex Pattern. (bnc#1194937)\n- CVE-2022-21291: Fixed Incorrect marking of writeable fields. (bnc#1194925)\n- CVE-2022-21293: Fixed Incomplete checks of StringBuffer and StringBuilder during deserialization. (bnc#1194935)\n- CVE-2022-21294: Fixed Incorrect IdentityHashMap size checks during deserialization. (bnc#1194934)\n- CVE-2022-21296: Fixed Incorrect access checks in XMLEntityManager. (bnc#1194932)\n- CVE-2022-21299: Fixed Infinite loop related to incorrect handling of newlines in XMLEntityScanner. (bnc#1194931)\n- CVE-2022-21305: Fixed Array indexing issues in LIRGenerator. (bnc#1194939)\n- CVE-2022-21340: Fixed Excessive resource use when reading JAR manifest attributes. (bnc#1194940)\n- CVE-2022-21341: Fixed OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream. (bnc#1194941)\n- CVE-2022-21360: Fixed Excessive memory allocation in BMPImageReader. (bnc#1194929)\n- CVE-2022-21365: Fixed Integer overflow in BMPImageReader. (bnc#1194928)\n- CVE-2022-21366: Fixed Excessive memory allocation in TIFF*Decompressor. (bnc#1194927)","dates":{"published":"2022-03-14T09:22:27.000Z","modified":"2026-02-04T03:32:21.268Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"opensuse","product":"java-11-openjdk&distro=openSUSE Leap 15.3","name":"java-11-openjdk","label":"java-11-openjdk&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 11.0.14.0-3.74.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.14.0-3.74.2","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U6OQKLWM3DMDDCKHLY4KFE6NXSK5MSXV/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1194925","label":"bugzilla.suse.com/1194925","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194926","label":"bugzilla.suse.com/1194926","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194927","label":"bugzilla.suse.com/1194927","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194928","label":"bugzilla.suse.com/1194928","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194929","label":"bugzilla.suse.com/1194929","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194930","label":"bugzilla.suse.com/1194930","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194931","label":"bugzilla.suse.com/1194931","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194932","label":"bugzilla.suse.com/1194932","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194933","label":"bugzilla.suse.com/1194933","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194934","label":"bugzilla.suse.com/1194934","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194935","label":"bugzilla.suse.com/1194935","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194937","label":"bugzilla.suse.com/1194937","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194939","label":"bugzilla.suse.com/1194939","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194940","label":"bugzilla.suse.com/1194940","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1194941","label":"bugzilla.suse.com/1194941","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21248","label":"www.suse.com/security/cve/CVE-2022-21248","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21277","label":"www.suse.com/security/cve/CVE-2022-21277","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21282","label":"www.suse.com/security/cve/CVE-2022-21282","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21283","label":"www.suse.com/security/cve/CVE-2022-21283","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21291","label":"www.suse.com/security/cve/CVE-2022-21291","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21293","label":"www.suse.com/security/cve/CVE-2022-21293","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21294","label":"www.suse.com/security/cve/CVE-2022-21294","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21296","label":"www.suse.com/security/cve/CVE-2022-21296","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21299","label":"www.suse.com/security/cve/CVE-2022-21299","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21305","label":"www.suse.com/security/cve/CVE-2022-21305","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21340","label":"www.suse.com/security/cve/CVE-2022-21340","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21341","label":"www.suse.com/security/cve/CVE-2022-21341","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21360","label":"www.suse.com/security/cve/CVE-2022-21360","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21365","label":"www.suse.com/security/cve/CVE-2022-21365","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21366","label":"www.suse.com/security/cve/CVE-2022-21366","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2022-21248","CVE-2022-21277","CVE-2022-21282","CVE-2022-21283","CVE-2022-21291","CVE-2022-21293","CVE-2022-21294","CVE-2022-21296","CVE-2022-21299","CVE-2022-21305","CVE-2022-21340","CVE-2022-21341","CVE-2022-21360","CVE-2022-21365","CVE-2022-21366"],"downstream":[],"duplicates":[],"related":["CVE-2022-21248","CVE-2022-21277","CVE-2022-21282","CVE-2022-21283","CVE-2022-21291","CVE-2022-21293","CVE-2022-21294","CVE-2022-21296","CVE-2022-21299","CVE-2022-21305","CVE-2022-21340","CVE-2022-21341","CVE-2022-21360","CVE-2022-21365","CVE-2022-21366"]},"timeline":[{"kind":"published","date":"2022-03-14T09:22:27.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:32:21.268Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:44:17.806Z","stale":false,"partial":false}}