SUSE-SU-2021:3797-1: java-1_7_0-openjdk&distro=HPE Helion OpenStack 8 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 24-11-2021Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2021:3797-1 is a vulnerability in java-1_7_0-openjdk&distro=HPE Helion OpenStack 8 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 9 · Downstream 0 · Related 9
CVE-2021-35550CVE-2021-35556CVE-2021-35559CVE-2021-35561CVE-2021-35564CVE-2021-35565

Timeline

  1. 24-11-2021
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for java-1_7_0-openjdk This update for java-1_7_0-openjdk fixes the following issues: Update to OpenJDK 7u321 (October 2021 CPU): - CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901). - CVE-2021-35556: Fixed excessive memory allocation in RTFParser (bsc#1191910). - CVE-2021-35559: Fixed excessive memory allocation in RTFReader (bsc#1191911). - CVE-2021-35561: Fixed excessive memory allocation in HashMap and HashSet (bsc#1191912). - CVE-2021-35564: Fixed certificates with end dates too far in the future can corrupt keystore (bsc#1191913). - CVE-2021-35565: Fixed loop in HttpsServer triggered during TLS session close (bsc#1191909). - CVE-2021-35586: Fixed excessive memory allocation in BMPImageReader (bsc#1191914). - CVE-2021-35588: Fixed incomplete validation of inner class references in ClassFileParser (bsc#1191905) - CVE-2021-35603: Fixed non-constant comparison during TLS handshakes (bsc#1191906).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse13 products
  • java-1_7_0-openjdk&distro=HPE Helion OpenStack 8< 1.7.0.321-43.53.2
  • java-1_7_0-openjdk&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 1.7.0.321-43.53.2
  • java-1_7_0-openjdk&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 1.7.0.321-43.53.2
  • java-1_7_0-openjdk&distro=SUSE Linux Enterprise Server 12 SP3-LTSS< 1.7.0.321-43.53.2
  • java-1_7_0-openjdk&distro=SUSE Linux Enterprise Server 12 SP4-LTSS< 1.7.0.321-43.53.2

1 vendor · 13 products

References

19 links
Show all 19 references