Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.16.0.8-alt1_1jpp11

0:11.0.16.0.8-alt11jpp11 built Aug. 5, 2022 Andrey Cherepanov in task 304702 Aug. 3, 2022 Andrey Cherepanov - New version. - Security fixes + JDK-8281859, CVE-2022-21540: Improve class compilation + JDK-8281866, CVE-2022-21541: Enhance MethodHandle invocations + JDK-8285407, CVE-2022-34169: Impro...

CLSA-2022-1659638796 Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-34169, CVE-2022-21540

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u342-b07. That fixes following CVEs: - CVE-2022-34169: Integer truncation issue in Xalan-J - CVE-2022-21540: Class compilation issue - CVE-2022-21541: Improper restriction of MethodHandle.invokeBasic - Update tzdata requirement to 2022a to match...

CLSA-2022-1659636917 Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21540, CVE-2022-21541, CVE-2022-34169

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u342-b07. That fixes following CVEs: - CVE-2022-34169: Integer truncation issue in Xalan-J - CVE-2022-21540: Class compilation issue - CVE-2022-21541: Improper restriction of MethodHandle.invokeBasic - Update tzdata requirement to 2022a to match...

Security Bulletin: IBM Sterling B2B Integrator is affected by a remote code execution in Spring Framework (CVE-2022-22965)

Summary IBM Sterling B2B Integrator is affected but not classified as vulnerable to a remote code execution in Spring Framework CVE-2022-22965 as it does not meet all of the following criteria: 1. JDK 9 or higher, 2. Apache Tomcat as the Servlet container, 3. Packaged as WAR in contrast to a Spri...

Security Bulletin: IBM Security SOAR is using a component with multiple known vulnerabilities - IBM JDK 8.0.7.6

Summary IBM® Security SOAR includes an older version of IBM JDK that may be identified and exploited. An update has been released which addresses these issues. The version of IBM JDK included in the latest version of SOAR App Host and IBM Security Soar is 8.0.7.10. Vulnerability Details...

java-11-openjdk security, bug fix, and enhancement update

1:11.0.16.0.8-1.0.1 - Replace upstream references Orabug: 34340155 1:11.0.16.0.8-1 - Update to jdk-11.0.16+8 - Update release notes to 11.0.16+8 - Use same tarball naming style as java-17-openjdk and java-latest-openjdk - Drop JDK-8257794 patch now upstreamed - Print release file during build,...

Oracle Java SE Security Update (jul2022) - Linux

Oracle Java SE is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

java-1.8.0-openjdk security, bug fix, and enhancement update

1:1.8.0.342.b07-1 - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use 'git apply' with...

java-1.8.0-openjdk security, bug fix, and enhancement update

1:1.8.0.342.b07-1 - Update to shenandoah-jdk8u342-b07 - Update release notes for shenandoah-8u342-b07. - Print release file during build, which should now include a correct SOURCE value from .src-rev - Update tarball script with IcedTea GitHub URL and .src-rev generation - Use 'git apply' with...

Security Bulletin: Vulnerabilities in the Java JDK affect IBM Event Streams (CVE-2022-21496, CVE-2022-21434, CVE-2022-21443)

Summary There are a number of vulnerabilities in the Java JDK used by IBM Event Streams. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated attacker to cause no confidentiality impact, low...

Security Bulletin: A security vulnerability has been identified in jackson-databind shipped with IBM Tivoli Netcool Impact (CVE-2020-36518, WS-2021-0616)

Summary jackson-databind is shipped with IBM Tivoli Netcool Impact. Information about a security vulnerability affecting jackson-databind has been published in a security bulletin. Vulnerability Details CVEID:CVE-2020-36518 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of...

Security Bulletin: Vulnerabilities in the Java JDK affect IBM Event Streams (CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21305, CVE-2022-21294, CVE-2022-21293, CVE-2022-21291, CVE-2022-21248)

Summary There are a number of vulnerabilities in the Java JDK used by IBM Event Streams. Vulnerability Details CVEID:CVE-2022-21365 DESCRIPTION: An unspecified vulnerability in Java SE related to the ImageIO component could allow an unauthenticated attacker to cause a denial of service resulting ...

MAL-2022-3006 Malicious code in feishu-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced690e77cd9a3ed298ed62aa2c407b5827af4fedd7b5b8d593c146e3f642f23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feishu-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced690e77cd9a3ed298ed62aa2c407b5827af4fedd7b5b8d593c146e3f642f23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bytedance-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83368a66afbbabd7ac6793976de57a7056b3950ef8a54688009fa1c2a9d635d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meituan-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5161a8baccee393b366e1fef2fe30c7b288b2d09fd8f519ca11c4d126d0e66fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in douyin-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f725588a684942b0ab79f14b1ec54c5696264a6e2b516db8b2b622088d93e31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4544 Malicious code in meituan-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5161a8baccee393b366e1fef2fe30c7b288b2d09fd8f519ca11c4d126d0e66fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1746 Malicious code in bytedance-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83368a66afbbabd7ac6793976de57a7056b3950ef8a54688009fa1c2a9d635d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2575 Malicious code in douyin-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f725588a684942b0ab79f14b1ec54c5696264a6e2b516db8b2b622088d93e31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...