MGASA-2022-0435
- Source
- https://advisories.mageia.org/MGASA-2022-0435.html
- Import Source
- https://advisories.mageia.org/MGASA-2022-0435.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2022-0435
- Related
- Published
- 2022-11-24T22:21:24Z
- Modified
- 2022-11-24T21:21:14Z
- Summary
- Updated java packages fix security vulnerability
- Details
-
Class compilation issue. (CVE-2022-21540) Improper restriction of MethodHandle.invokeBasic(). (CVE-2022-21541) Integer truncation issue in Xalan-J. (CVE-2022-34169) Improper MultiByte conversion can lead to buffer overflow. (CVE-2022-21618) Improper handling of long NTLM client hostnames. (CVE-2022-21619) Insufficient randomization of JNDI DNS port numbers. (CVE-2022-21624) Excessive memory allocation in X.509 certificate parsing. (CVE-2022-21626) HttpServer no connection count limit. (CVE-2022-21628) Missing SNI caching in HTTP/2. (CVE-2022-39399)
- References
-
- https://advisories.mageia.org/MGASA-2022-0435.html
- https://bugs.mageia.org/show_bug.cgi?id=30753
- https://access.redhat.com/errata/RHSA-2022:5696
- https://access.redhat.com/errata/RHSA-2022:5683
- https://www.oracle.com/security-alerts/cpujul2022.html#AppendixJAVA
- https://access.redhat.com/errata/RHSA-2022:7007
- https://access.redhat.com/errata/RHSA-2022:7013
- https://www.oracle.com/security-alerts/cpuoct2022.html#AppendixJAVA
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:8 / java-1.8.0-openjdk
Package
- Name
- java-1.8.0-openjdk
- Purl
- pkg:rpm/mageia/java-1.8.0-openjdk?distro=mageia-8
Mageia:8 / java-11-openjdk
Package
- Name
- java-11-openjdk
- Purl
- pkg:rpm/mageia/java-11-openjdk?distro=mageia-8
Mageia:8 / timezone
Package
- Name
- timezone
- Purl
- pkg:rpm/mageia/timezone?distro=mageia-8