{"schemaVersion":3,"id":"SUSE-SU-2023:1823-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for java-1_8_0-ibm\n\nThis update for java-1_8_0-ibm fixes the following issues:\n\n- Update to Java 8.0 Service Refresh 8 (bsc#1208480):\n\n  * Security fixes:\n    - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249).\n    - CVE-2023-21835: Fixed handshake DoS attack against DTLS connections (bsc#1207246).\n    - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).\n\n  * New Features/Enhancements:\n    - Add RSA-PSS signature to IBMJCECCA.\n  * Defect Fixes:\n    - IJ45437 Service, Build, Packaging and Deliver: Getting\n      FIPSRUNTIMEEXCEPTION when calling java code:\n      MESSAGEDIGEST.GETINSTANCE('SHA256', 'IBMJCEFIPS'); in MAC\n    - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843\n    - IJ45280 Class Libraries: Update timezone information to the\n      latest TZDATA2022F\n    - IJ44896 Class Libraries: Update timezone information to the\n      latest TZDATA2022G\n    - IJ45436 Java Virtual Machine: Stack walking code gets into\n      endless loop, hanging the application\n    - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified\n      multiple times on the same command line the first option takes\n      precedence instead of the last\n    - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()\n      due to a NULL pointer\n    - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static\n      final field object properties\n    - IJ44107 JIT Compiler: JIT publishes new object reference to other\n      threads without executing a memory flush\n    - IX90193 ORB: Fix security vulnerability CVE-2023-21830\n    - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has\n      similar error of JDK-8253368\n    - IJ45148 Security: code changes for tech preview\n    - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,\n      using IBMJCEPLUS, causes a small memory leak\n    - IJ44172 Security: Disable SHA-1 signed jars for EA\n    - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,\n      using IBMJCEPLUS, Causes a small memory leak\n    - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305\n      crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION\n    - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA\n      during signature operations resulting in Java cores\n    - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm\n    - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain\n      a SUBJECTKEYIDENTIFIER extension\n    - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()\n      method uses SHA1XXXX signature algorithms to match private and public keys\n    - IJ45203 Security: RSAPSS multiple names for KEYTYPE\n    - IJ43920 Security: The PKCS12 keystore update and the PBES2 support\n    - IJ40002 XML: Fix security vulnerability CVE-2022-21426","dates":{"published":"2023-04-12T09:36:15.000Z","modified":"2026-02-04T03:14:04.046Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"java-1_8_0-ibm","label":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 1.8.0_sr8.0-30.105.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0_sr8.0-30.105.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP4-ESPOS","name":"java-1_8_0-ibm","label":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 1.8.0_sr8.0-30.105.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0_sr8.0-30.105.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","name":"java-1_8_0-ibm","label":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 1.8.0_sr8.0-30.105.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0_sr8.0-30.105.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP5","name":"java-1_8_0-ibm","label":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 1.8.0_sr8.0-30.105.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0_sr8.0-30.105.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"java-1_8_0-ibm","label":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 1.8.0_sr8.0-30.105.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0_sr8.0-30.105.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"java-1_8_0-ibm","label":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 1.8.0_sr8.0-30.105.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0_sr8.0-30.105.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","name":"java-1_8_0-ibm","label":"java-1_8_0-ibm&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","purlType":"rpm","versions":[{"text":"< 1.8.0_sr8.0-30.105.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0_sr8.0-30.105.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-1_8_0-ibm&distro=SUSE OpenStack Cloud 9","name":"java-1_8_0-ibm","label":"java-1_8_0-ibm&distro=SUSE OpenStack Cloud 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE OpenStack Cloud 9","purlType":"rpm","versions":[{"text":"< 1.8.0_sr8.0-30.105.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0_sr8.0-30.105.1","eol":null,"hubHref":null},{"vendor":"suse","product":"java-1_8_0-ibm&distro=SUSE OpenStack Cloud Crowbar 9","name":"java-1_8_0-ibm","label":"java-1_8_0-ibm&distro=SUSE OpenStack Cloud Crowbar 9","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/java-1_8_0-ibm&distro=SUSE OpenStack Cloud Crowbar 9","purlType":"rpm","versions":[{"text":"< 1.8.0_sr8.0-30.105.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0_sr8.0-30.105.1","eol":null,"hubHref":null}],"affectedCount":9,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231823-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20231823-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1207246","label":"bugzilla.suse.com/1207246","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1207248","label":"bugzilla.suse.com/1207248","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1207249","label":"bugzilla.suse.com/1207249","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1208480","label":"bugzilla.suse.com/1208480","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21426","label":"www.suse.com/security/cve/CVE-2022-21426","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21830","label":"www.suse.com/security/cve/CVE-2023-21830","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21835","label":"www.suse.com/security/cve/CVE-2023-21835","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21843","label":"www.suse.com/security/cve/CVE-2023-21843","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2022-21426","CVE-2023-21830","CVE-2023-21835","CVE-2023-21843"],"downstream":[],"duplicates":[],"related":["CVE-2022-21426","CVE-2023-21830","CVE-2023-21835","CVE-2023-21843"]},"timeline":[{"kind":"published","date":"2023-04-12T09:36:15.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:14:04.046Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T21:26:07.860Z","stale":false,"partial":false}}