SUSE-SU-2023:0720-1: java-1_8_0-openjdk&distro=openSUSE Leap 15.4
Published
Published 14-03-2023Last modified 02-05-2025
Vulnerability summary
SUSE-SU-2023:0720-1 is a vulnerability in java-1_8_0-openjdk&distro=openSUSE Leap 15.4 with no CVSS score yet.
Priority
Insufficient evidence
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?CVSS score
Not scored
010
No CVSS score recordedEPSS scoreNot scoredRisk metrics not yet published.
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 2 · Downstream 0 · Related 2Timeline
- 14-03-2023PublishedVulnerability first disclosed.
- 02-05-2025Last modifiedVulnerability information updated.
Description
Security update for java-1_8_0-openjdk This update for java-1_8_0-openjdk fixes the following issues: Updated to version jdk8u362 (icedtea-3.26.0): - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249). - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Version check
Known conditions: not stated in public data.
Suse11 products
- java-1_8_0-openjdk&distro=SUSE Enterprise Storage 7< 1.8.0.362-150000.3.76.1
- java-1_8_0-openjdk&distro=SUSE Enterprise Storage 7.1< 1.8.0.362-150000.3.76.1
- java-1_8_0-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS< 1.8.0.362-150000.3.76.1
- java-1_8_0-openjdk&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 1.8.0.362-150000.3.76.1
- java-1_8_0-openjdk&distro=SUSE Linux Enterprise Module for Legacy 15 SP4< 1.8.0.362-150000.3.76.1
- java-1_8_0-openjdk&distro=SUSE Linux Enterprise Server 15 SP1-LTSS< 1.8.0.362-150000.3.76.1
- java-1_8_0-openjdk&distro=SUSE Linux Enterprise Server 15 SP2-LTSS< 1.8.0.362-150000.3.76.1
- java-1_8_0-openjdk&distro=SUSE Linux Enterprise Server 15 SP3-LTSS< 1.8.0.362-150000.3.76.1
- java-1_8_0-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1< 1.8.0.362-150000.3.76.1
- java-1_8_0-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2< 1.8.0.362-150000.3.76.1
- java-1_8_0-openjdk&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3< 1.8.0.362-150000.3.76.1
Opensuse1 product
- java-1_8_0-openjdk&distro=openSUSE Leap 15.4< 1.8.0.362-150000.3.76.1
2 vendors · 12 products
References
5 linksRelated vulnerabilities
Insufficient evidenceSUSE-SU-2025:4039-1opensuse · java-1_8_0-openjdk&distro=openSUSE Leap 15.6 +12 moreopensuse java-1_8_0-openjdk&distro=openSUSE Leap 15.6Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues:
Update to version jdk8u472 (icedtea-3.37.0):
- CVE-2025-53057: Fixed certificate handling leading to unauthorized creation, deletion or modification access to critical data (bsc#1252414)
- CVE-2025-53066: Fixed Path factories leading to unauthorized access to critical data or complete access (bsc#1252417)CVSSUnscoredInsufficient evidenceSUSE-SU-2025:03224-1opensuse · java-1_8_0-openjdk&distro=openSUSE Leap 15.6 +12 moreopensuse java-1_8_0-openjdk&distro=openSUSE Leap 15.6Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues:
Update to version jdk8u462 (icedtea-3.36.0).
Security issues fixed:
- CVE-2025-30749: heap corruption allows unauthenticated attacker with network access to compromise and takeover Java
applications that load and run untrusted code (bsc#1246595).
- CVE-2025-30754: incomplete handshake allows unauthenticated attacker with network access via TLS to gain unauthorized
update, insert, delete and read access to sensitive data (bsc#1246598).
- CVE-2025-30761: issue in Scripting component allows unauthenticated attacker with network access to gain
unauthorized creation, deletion or modification access to critical data (bsc#1246580).
- CVE-2025-50106: Glyph out-of-memory access allows unauthenticated attacker with network access to compromise and
takeover Java applications that load and run untrusted code (bsc#1246584).
Other issues fixed:
- Import of OpenJDK 8 u462 build 08
+ JDK-8026976: ECParameters, Point does not match field size.
+ JDK-8071996: split_if accesses NULL region of ConstraintCast.
+ JDK-8186143: keytool -ext option doesn't accept wildcards for DNS subject alternative names.
+ JDK-8186787: clang-4.0 SIGSEGV in Unsafe_PutByte.
+ JDK-8248001: javadoc generates invalid HTML pages whose ftp:// links are broken.
+ JDK-8278472: Invalid value set to CANDIDATEFORM structure.
+ JDK-8293107: GHA: Bump to Ubuntu 22.04.
+ JDK-8303770: Remove Baltimore root certificate expiring in May 2025.
+ JDK-8309841: Jarsigner should print a warning if an entry is removed.
+ JDK-8339810: Clean up the code in sun.tools.jar.Main to properly close resources and use ZipFile during extract.
+ JDK-8345625: Better HTTP connections.
+ JDK-8346887: DrawFocusRect() may cause an assertion failure.
+ JDK-8349111: Enhance Swing supports.
+ JDK-8350498: Remove two Camerfirma root CA certificates.
+ JDK-8352716: (tz) Update Timezone Data to 2025b.
+ JDK-8353433: XCG currency code not recognized in JDK 8u.
+ JDK-8356096: ISO 4217 Amendment 179 Update.
+ JDK-8359170: Add 2 TLS and 2 CS Sectigo roots.
- Backports
+ JDK-8358538: Update GHA Windows runner to 2025.
- JDK-8354941: Build failure with glibc 2.42 due to uabs() name collision.CVSSUnscoredInsufficient evidenceSUSE-SU-2025:1525-1opensuse · java-1_8_0-openjdk&distro=openSUSE Leap 15.6 +11 moreopensuse java-1_8_0-openjdk&distro=openSUSE Leap 15.6Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues:
Update to version jdk8u452 (icedtea-3.35.0)
Security issues fixed:
- CVE-2025-21587: unauthorized creation, deletion or modification of critical data through the JSSE component.
(bsc#1241274)
- CVE-2025-30691: unauthorized update, insert or delete access to a subset of Oracle Java SE data through the Compiler
component. (bsc#1241275)
- CVE-2025-30698: unauthorized access to Oracle Java SE data and unauthorized ability to cause partial DoS through the
2D component. (bsc#1241276)
Non-security issues fixed:
- JDK-8212096: javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java failed intermittently due to SSLException:
Tag mismatch.
- JDK-8261020: wrong format parameter in create_emergency_chunk_path.
- JDK-8266881: enable debug log for SSLEngineExplorerMatchedSNI.java.
- JDK-8268457: XML Transformer outputs Unicode supplementary character incorrectly to HTML.
- JDK-8309841: Jarsigner should print a warning if an entry is removed.
- JDK-8337494: clarify JarInputStream behavior.
- JDK-8339637: (tz) update Timezone Data to 2024b.
- JDK-8339644: improve parsing of Day/Month in tzdata rules
- JDK-8339810: clean up the code in sun.tools.jar.Main to properly close resources and use ZipFile during extract.
- JDK-8340552: harden TzdbZoneRulesCompiler against missing zone names.
- JDK-8342562: enhance Deflater operations.
- JDK-8346587: distrust TLS server certificates anchored by Camerfirma Root CAs.
- JDK-8347847: enhance jar file support.
- JDK-8347965: (tz) update Timezone Data to 2025a.
- JDK-8348211: [8u] sun/management/jmxremote/startstop/JMXStartStopTest.java fails after backport of JDK-8066708.
- JDK-8350816: [8u] update TzdbZoneRulesCompiler to ignore HST/EST/MST links.
- JDK-8352097: (tz) zone.tab update missed in 2025a backport.
- JDK-8353433: XCG currency code not recognized in JDK 8u.CVSSUnscoredInsufficient evidenceSUSE-SU-2024:4202-1opensuse · java-1_8_0-openjdk&distro=openSUSE Leap 15.5 +13 moreopensuse java-1_8_0-openjdk&distro=openSUSE Leap 15.5Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues:
Update to version jdk8u432 (icedtea-3.33.0):
- CVE-2024-21208: Fixed partial DoS in component Networking (bsc#1231702,JDK-8328286)
- CVE-2024-21210: Fixed unauthorized update, insert or delete access to some of Oracle Java SE accessible data in component Hotspot (bsc#1231711,JDK-8328544)
- CVE-2024-21217: Fixed partial DoS in component Serialization (bsc#1231716,JDK-8331446)
- CVE-2024-21235: Fixed unauthorized read/write access to data in component Hotspot (bsc#1231719,JDK-8332644)CVSSUnscoredInsufficient evidenceSUSE-SU-2024:2786-1opensuse · java-1_8_0-openjdk&distro=openSUSE Leap 15.5 +13 moreopensuse java-1_8_0-openjdk&distro=openSUSE Leap 15.5Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues:
Update to version jdk8u422 (icedtea-3.32.0):
* Security fixes
+ JDK-8314794, CVE-2024-21131, bsc#1228046: Improve UTF8 String supports
+ JDK-8319859, CVE-2024-21138, bsc#1228047: Better symbol storage
+ JDK-8320097: Improve Image transformations
+ JDK-8320548, CVE-2024-21140, bsc#1228048: Improved loop handling
+ JDK-8322106, CVE-2024-21144, bsc#1228050: Enhance Pack 200 loading
+ JDK-8323231, CVE-2024-21147, bsc#1228052: Improve array management
+ JDK-8323390: Enhance mask blit functionality
+ JDK-8324559, CVE-2024-21145, bsc#1228051: Improve 2D image handling
+ JDK-8325600: Better symbol storage
* Import of OpenJDK 8 u422 build 05
+ JDK-8025439: [TEST BUG] [macosx]
PrintServiceLookup.lookupPrintServices doesn't work properly
since jdk8b105
+ JDK-8069389: CompilerOracle prefix wildcarding is broken for
long strings
+ JDK-8159454: [TEST_BUG] javax/swing/ToolTipManager/7123767/
/bug7123767.java: number of checked graphics configurations
should be limited
+ JDK-8198321: javax/swing/JEditorPane/5076514/bug5076514.java fails
+ JDK-8203691: [TESTBUG] Test
/runtime/containers/cgroup/PlainRead.java fails
+ JDK-8205407: [windows, vs<2017] C4800 after 8203197
+ JDK-8235834: IBM-943 charset encoder needs updating
+ JDK-8239965: XMLEncoder/Test4625418.java fails due to 'Error:
Cp943 - can't read properly'
+ JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
characters were garbled
+ JDK-8256152: tests fail because of ambiguous method resolution
+ JDK-8258855: Two tests sun/security/krb5/auto/
/ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
failed on OL8.3
+ JDK-8262017: C2: assert(n != __null) failed: Bad immediate
dominator info.
+ JDK-8268916: Tests for AffirmTrust roots
+ JDK-8278067: Make HttpURLConnection default keep alive
timeout configurable
+ JDK-8291226: Create Test Cases to cover scenarios for
JDK-8278067
+ JDK-8291637: HttpClient default keep alive timeout not
followed if server sends invalid value
+ JDK-8291638: Keep-Alive timeout of 0 should close connection
immediately
+ JDK-8293562: KeepAliveCache Blocks Threads while Closing
Connections
+ JDK-8303466: C2: failed: malformed control flow. Limit type
made precise with MaxL/MinL
+ JDK-8304074: [JMX] Add an approximation of total bytes
allocated on the Java heap by the JVM
+ JDK-8313081: MonitoringSupport_lock should be unconditionally
initialized after 8304074
+ JDK-8315020: The macro definition for LoongArch64 zero build
is not accurate.
+ JDK-8316138: Add GlobalSign 2 TLS root certificates
+ JDK-8318410: jdk/java/lang/instrument/BootClassPath/
/BootClassPathTest.sh fails on Japanese Windows
+ JDK-8320005: Allow loading of shared objects with .a
extension on AIX
+ JDK-8324185: [8u] Accept Xcode 12+ builds on macOS
+ JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/
/AKISerialNumber.java is failing
+ JDK-8325927: [8u] Backport of JDK-8170552 missed part of the test
+ JDK-8326686: Bump update version of OpenJDK: 8u422
+ JDK-8327440: Fix 'bad source file' error during beaninfo
generation
+ JDK-8328809: [8u] Problem list some CA tests
+ JDK-8328825: Google CAInterop test failures
+ JDK-8329544: [8u] sun/security/krb5/auto/
/ReplayCacheTestProc.java cannot find the testlibrary
+ JDK-8331791: [8u] AIX build break from JDK-8320005 backport
+ JDK-8331980: [8u] Problem list CAInterop.java#certignarootca test
+ JDK-8335552: [8u] JDK-8303466 backport to 8u requires 3
::Identity signature fixes
* Bug fixes
+ JDK-8331730: [8u] GHA: update sysroot for cross builds to
Debian bullseye
+ JDK-8333669: [8u] GHA: Dead VS2010 download link
+ JDK-8318039: GHA: Bump macOS and Xcode versionsCVSSUnscoredInsufficient evidenceSUSE-SU-2024:1451-1opensuse · java-1_8_0-openjdk&distro=openSUSE Leap 15.5 +11 moreopensuse java-1_8_0-openjdk&distro=openSUSE Leap 15.5Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues:
- CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979)
- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (JDK-8322122,bsc#1222983)
- CVE-2024-21085: Fixed Pack200 excessive memory allocation (JDK-8322114,bsc#1222984)
- CVE-2024-21094: Fixed unauthorized data modification due to C2 compilation failure with 'Exceeded _node_regs array' (JDK-8317507,JDK-8325348,bsc#1222986)
Other fixes:
- Update to version jdk8u412 (icedtea-3.31.0) (April 2024 CPU)
* Security fixes
+ JDK-8318340: Improve RSA key implementations
* Import of OpenJDK 8 u412 build 08
+ JDK-8011180: Delete obsolete scripts
+ JDK-8016451: Scary messages emitted by
build.tools.generatenimbus.PainterGenerator during build
+ JDK-8021961: setAlwaysOnTop doesn't behave correctly in
Linux/Solaris under certain scenarios
+ JDK-8023735: [TESTBUG][macosx]
runtime/XCheckJniJsig/XCheckJSig.java fails on MacOS X
+ JDK-8074860: Structured Exception Catcher missing around
CreateJavaVM on Windows
+ JDK-8079441: Intermittent failures on Windows with 'Unexpected
exit from test [exit code: 1080890248]' (0x406d1388)
+ JDK-8155590: Dubious collection management in
sun.net.www.http.KeepAliveCache
+ JDK-8168518: rcache interop with krb5-1.15
+ JDK-8183503: Update hotspot tests to allow for unique test
classes directory
+ JDK-8186095: upgrade to jtreg 4.2 b08
+ JDK-8186199: [windows] JNI_DestroyJavaVM not covered by SEH
+ JDK-8192931: Regression test
java/awt/font/TextLayout/CombiningPerf.java fails
+ JDK-8208655: use JTreg skipped status in hotspot tests
+ JDK-8208701: Fix for JDK-8208655 causes test failures in CI
tier1
+ JDK-8208706: compiler/tiered/
/ConstantGettersTransitionsTest.java fails to compile
+ JDK-8213410: UseCompressedOops requirement check fails fails
on 32-bit system
+ JDK-8222323: ChildAlwaysOnTopTest.java fails with
'RuntimeException: Failed to unset alwaysOnTop'
+ JDK-8224768: Test ActalisCA.java fails
+ JDK-8251155: HostIdentifier fails to canonicalize hostnames
starting with digits
+ JDK-8251551: Use .md filename extension for README
+ JDK-8268678: LetsEncryptCA.java test fails as Let’s Encrypt
Authority X3 is retired
+ JDK-8270280: security/infra/java/security/cert/
/CertPathValidator/certification/LetsEncryptCA.java OCSP
response error
+ JDK-8270517: Add Zero support for LoongArch
+ JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
/security/cert/CertPathValidator/certification/BuypassCA.java
no longer needs ocspEnabled
+ JDK-8276139: TestJpsHostName.java not reliable, better to
expand HostIdentifierCreate.java test
+ JDK-8288132: Update test artifacts in QuoVadis CA interop
tests
+ JDK-8297955: LDAP CertStore should use LdapName and not
String for DNs
+ JDK-8301310: The SendRawSysexMessage test may cause a JVM
crash
+ JDK-8308592: Framework for CA interoperability testing
+ JDK-8312126: NullPointerException in CertStore.getCRLs after
8297955
+ JDK-8315042: NPE in PKCS7.parseOldSignedData
+ JDK-8315757: [8u] Add cacerts JTREG tests to GHA tier1 test
set
+ JDK-8320713: Bump update version of OpenJDK: 8u412
+ JDK-8321060: [8u] hotspot needs to recognise VS2022
+ JDK-8321408: Add Certainly roots R1 and E1
+ JDK-8322725: (tz) Update Timezone Data to 2023d
+ JDK-8322750: Test 'api/java_awt/interactive/
/SystemTrayTests.html' failed because A blue ball icon is
added outside of the system tray
+ JDK-8323202: [8u] Remove get_source.sh and hgforest.sh
+ JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/
/platform/docker/TestDockerMemoryMetrics.java always fail
because OOM killed
+ JDK-8324530: Build error with gcc 10
+ JDK-8325150: (tz) Update Timezone Data to 2024a
* Bug fixes
+ Support make 4.4
- Do not recommend timezone-java8 (bsc#1213470)
- Use %patch -P N instead of deprecated %patchN.CVSSUnscored