Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
suseSuseSUSE-SU-2022:1265-1
HistoryApr 19, 2022 - 12:00 a.m.

Security update for jsoup, jsr-305 (important)

2022-04-1900:00:00
lists.opensuse.org
30

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

An update that fixes one vulnerability is now available.

Description:

This update for jsoup, jsr-305 fixes the following issues:

  • CVE-2021-37714: Fixed infinite in untrusted HTML or XML data parsing
    (bsc#1189749).

Changes in jsr-305:

  • Build with java source and target levels 8
  • Upgrade to upstream version 3.0.2

Changes in jsoup:

  • Upgrade to upstream version 1.14.2
  • Generate tarball using source service instead of a script

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.4:

    zypper in -t patch openSUSE-SLE-15.4-2022-1265=1

  • openSUSE Leap 15.3:

    zypper in -t patch openSUSE-SLE-15.3-2022-1265=1

  • SUSE Manager Server 4.1:

    zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-1265=1

  • SUSE Manager Retail Branch Server 4.1:

    zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-1265=1

  • SUSE Manager Proxy 4.1:

    zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-1265=1

  • SUSE Linux Enterprise Server for SAP 15-SP2:

    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-1265=1

  • SUSE Linux Enterprise Server 15-SP2-LTSS:

    zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-1265=1

  • SUSE Linux Enterprise Server 15-SP2-BCL:

    zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-1265=1

  • SUSE Linux Enterprise Realtime Extension 15-SP2:

    zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-1265=1

  • SUSE Linux Enterprise Module for Development Tools 15-SP4:

    zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP4-2022-1265=1

  • SUSE Linux Enterprise Module for Development Tools 15-SP3:

    zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP3-2022-1265=1

  • SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS:

    zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-1265=1

  • SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS:

    zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-1265=1

  • SUSE Enterprise Storage 7:

    zypper in -t patch SUSE-Storage-7-2022-1265=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.4noarch< - openSUSE Leap 15.4 (noarch):- openSUSE Leap 15.4 (noarch):.noarch.rpm
openSUSE Leap15.3noarch< - openSUSE Leap 15.3 (noarch):- openSUSE Leap 15.3 (noarch):.noarch.rpm
SUSE Manager Server4.1noarch< - SUSE Manager Server 4.1 (noarch):- SUSE Manager Server 4.1 (noarch):.noarch.rpm
SUSE Manager Retail Branch Server4.1noarch< - SUSE Manager Retail Branch Server 4.1 (noarch):- SUSE Manager Retail Branch Server 4.1 (noarch):.noarch.rpm
SUSE Manager Proxy4.1noarch< - SUSE Manager Proxy 4.1 (noarch):- SUSE Manager Proxy 4.1 (noarch):.noarch.rpm
SUSE Linux Enterprise Server for SAP 15SP2noarch<  SUSE Linux Enterprise Server for SAP 15-SP2 (noarch):- SUSE Linux Enterprise Server for SAP 15-SP2 (noarch):.noarch.rpm
SUSE Linux Enterprise Server 15SP2-LTSSnoarch- suse linux enterprise server 15< SP2-LTSS (noarch):- SUSE Linux Enterprise Server 15-SP2-LTSS (noarch):.noarch.rpm
SUSE Linux Enterprise Server 15SP2-BCLnoarch- suse linux enterprise server 15< SP2-BCL (noarch):- SUSE Linux Enterprise Server 15-SP2-BCL (noarch):.noarch.rpm
SUSE Linux Enterprise Realtime Extension 15SP2noarch<  SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch):- SUSE Linux Enterprise Realtime Extension 15-SP2 (noarch):.noarch.rpm
SUSE Linux Enterprise Module for Development Tools 15SP4noarch<  SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch):- SUSE Linux Enterprise Module for Development Tools 15-SP4 (noarch):.noarch.rpm
Rows per page:
1-10 of 141

Related

ibm 10
nessus 11
prion 1
osv 2
cve 1
redhatcve 1
atlassian 1
debiancve 1
ubuntucve 1
openvas 2
cbl_mariner 1
veracode 1
github 1
vaadin 1
redhat 14
oracle 4
ibm
ibm
Security Bulletin: A CVE-2021-37714 vulnerability in jsoup affects IBM Process Designer in IBM Business Automation Workflow and IBM Business Process Manager
2022-09-14 15:28:14
Security Bulletin: Vulnerability in jsoup may affect Cúram Social Program Management (CVE-2021-37714)
2021-11-25 16:13:13
Security Bulletin: IBM Security Guardium is affected by a jsoup vulnerability (CVE-2021-37714)
2022-11-08 20:07:11
nessus
nessus
SUSE SLED15 / SLES15 Security Update : jsoup, jsr-305 (SUSE-SU-2022:1265-1)
2022-04-21 00:00:00
Jenkins Enterprise and Operations Center < 2.277.43.0.3 / 2.319.1.5 Multiple Vulnerabilities (CloudBees Security Advisory 2021-12-01)
2022-02-16 00:00:00
Oracle Business Process Management Suite (Apr 2022 CPU)
2022-04-20 00:00:00
prion
prion
Input validation
2021-08-18 15:15:00
osv
osv
Uncaught Exception in jsoup
2021-08-23 19:42:38
CVE-2021-37714
2021-08-18 15:15:08
cve
cve
CVE-2021-37714
2021-08-18 15:15:00
redhatcve
redhatcve
CVE-2021-37714
2021-08-18 17:35:05
atlassian
atlassian
DoS (Denial of Service) org.jsoup:jsoup in Jira Software Data Center and Server
2023-11-12 13:45:30
debiancve
debiancve
CVE-2021-37714
2021-08-18 15:15:00
ubuntucve
ubuntucve
CVE-2021-37714
2021-08-18 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:1265-1)
2022-04-20 00:00:00
openSUSE: Security Advisory for jsoup, (SUSE-SU-2022:1265-1)
2022-05-17 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-37714 affecting package jsoup 1.11.3-3
2024-04-26 21:08:25
veracode
veracode
Denial Of Service
2021-08-19 02:33:54
github
github
Uncaught Exception in jsoup
2021-08-23 19:42:38
vaadin
vaadin
Denial of service in third-party component in Vaadin 7 and 8
2021-10-27 00:00:00
redhat
redhat
(RHSA-2021:5154) Moderate: Red Hat JBoss Enterprise Application Platform 7.3.10 security update
2021-12-15 14:37:22
(RHSA-2021:4676) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 7
2021-11-15 16:54:28
(RHSA-2021:4677) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.2 security update on RHEL 8
2021-11-15 16:54:31
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON
Related for SUSE-SU-2022:1265-1
ibm10nessus11prion1osv2cve1redhatcve1atlassian1debiancve1ubuntucve1openvas2cbl_mariner1veracode1github1vaadin1redhat14oracle4