Lucene search

K
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/9133D861402686EF8ADC5BE01A5F3826
HistoryFeb 24, 2022 - 12:00 a.m.

Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.14.1.1-alt1_1jpp11

2022-02-2400:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
7

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0:11.0.14.1.1-alt1_1jpp11 built Feb. 24, 2022 Andrey Cherepanov in task #295621

Feb. 18, 2022 Andrey Cherepanov

- New version.
- Security fixes
  + JDK-8217375: jarsigner breaks old signature with long lines in manifest
  + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if zip has dir named "." inside
  + JDK-8264934, CVE-2022-21248: Enhance cross VM serialization
  + JDK-8268488: More valuable DerValues
  + JDK-8268494: Better inlining of inlined interfaces
  + JDK-8268512: More content for ContentInfo
  + JDK-8268795: Enhance digests of Jar files
  + JDK-8268801: Improve PKCS attribute handling
  + JDK-8268813, CVE-2022-21283: Better String matching
  + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
  + JDK-8269944: Better HTTP transport redux
  + JDK-8270386, CVE-2022-21291: Better verification of scan methods
  + JDK-8270392, CVE-2022-21293: Improve String constructions
  + JDK-8270416, CVE-2022-21294: Enhance construction of Identity maps
  + JDK-8270492, CVE-2022-21282: Better resolution of URIs
  + JDK-8270498, CVE-2022-21296: Improve SAX Parser configuration management
  + JDK-8270646, CVE-2022-21299: Improved scanning of XML entities
  + JDK-8270952, CVE-2022-21277: Improve TIFF file handling
  + JDK-8271962: Better TrueType font loading
  + JDK-8271968: Better canonical naming
  + JDK-8271987: Manifest improved manifest entries
  + JDK-8272014, CVE-2022-21305: Better array indexing
  + JDK-8272026, CVE-2022-21340: Verify Jar Verification
  + JDK-8272236, CVE-2022-21341: Improve serial forms for transport
  + JDK-8272272: Enhance jcmd communication
  + JDK-8272462: Enhance image handling
  + JDK-8273290: Enhance sound handling
  + JDK-8273756, CVE-2022-21360: Enhance BMP image support
  + JDK-8273838, CVE-2022-21365: Enhanced BMP processing
  + JDK-8274096, CVE-2022-21366: Improve decoding of image files
  + JDK-8279541: Improve HarfBuzz
- Fixed linking libraries.
- Removed duplicated files with legal information from packages.
OSVersionArchitecturePackageVersionFilename
ALT Linux10srcjava-11-openjdk-11.0.18.0.10-alt1_1jpp11.src.rpm< 0:11.0.14.1.1-alt1_1jpp11java-11-openjdk-11.0.18.0.10-alt1_1jpp11.src.rpm
ALT Linux10x86_64java-11-openjdk-11.0.18.0.10-alt1_1jpp11.x86_64.rpm< 0:11.0.14.1.1-alt1_1jpp11java-11-openjdk-11.0.18.0.10-alt1_1jpp11.x86_64.rpm
ALT Linux10x86_64java-11-openjdk-debuginfo-11.0.18.0.10-alt1_1jpp11.x86_64.rpm< 0:11.0.14.1.1-alt1_1jpp11java-11-openjdk-debuginfo-11.0.18.0.10-alt1_1jpp11.x86_64.rpm
ALT Linux10x86_64java-11-openjdk-demo-11.0.18.0.10-alt1_1jpp11.x86_64.rpm< 0:11.0.14.1.1-alt1_1jpp11java-11-openjdk-demo-11.0.18.0.10-alt1_1jpp11.x86_64.rpm
ALT Linux10x86_64java-11-openjdk-devel-11.0.18.0.10-alt1_1jpp11.x86_64.rpm< 0:11.0.14.1.1-alt1_1jpp11java-11-openjdk-devel-11.0.18.0.10-alt1_1jpp11.x86_64.rpm
ALT Linux10x86_64java-11-openjdk-devel-debuginfo-11.0.18.0.10-alt1_1jpp11.x86_64.rpm< 0:11.0.14.1.1-alt1_1jpp11java-11-openjdk-devel-debuginfo-11.0.18.0.10-alt1_1jpp11.x86_64.rpm
ALT Linux10x86_64java-11-openjdk-headless-11.0.18.0.10-alt1_1jpp11.x86_64.rpm< 0:11.0.14.1.1-alt1_1jpp11java-11-openjdk-headless-11.0.18.0.10-alt1_1jpp11.x86_64.rpm
ALT Linux10x86_64java-11-openjdk-headless-debuginfo-11.0.18.0.10-alt1_1jpp11.x86_64.rpm< 0:11.0.14.1.1-alt1_1jpp11java-11-openjdk-headless-debuginfo-11.0.18.0.10-alt1_1jpp11.x86_64.rpm
ALT Linux10x86_64java-11-openjdk-javadoc-11.0.18.0.10-alt1_1jpp11.x86_64.rpm< 0:11.0.14.1.1-alt1_1jpp11java-11-openjdk-javadoc-11.0.18.0.10-alt1_1jpp11.x86_64.rpm
ALT Linux10x86_64java-11-openjdk-javadoc-zip-11.0.18.0.10-alt1_1jpp11.x86_64.rpm< 0:11.0.14.1.1-alt1_1jpp11java-11-openjdk-javadoc-zip-11.0.18.0.10-alt1_1jpp11.x86_64.rpm
Rows per page:
1-10 of 631

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P