File _patchinfo of Package patchinfo.31461
<patchinfo incident="31461"> <issue tracker="cve" id="2015-4000"/> <issue tracker="cve" id="2023-22081"/> <issue tracker="cve" id="2023-22067"/> <issue tracker="bnc" id="1216374">VUL-0: CVE-2023-22081: java-1_8_0-openjdk,java-9-openjdk,java-10-openjdk,java-11-openjdk,java-17-openjdk: Oracle October 2023 CPU</issue> <issue tracker="bnc" id="1216379">VUL-0: CVE-2023-22067: java-1_8_0-openjdk: IOR deserialization issue in CORBA</issue> <issue tracker="bnc" id="1211968">L3: SLES12SP5 vulnerable to CVE-2015-4000 (Logjam)?</issue> <packager>fstrba</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for java-1_8_0-openjdk</summary> <description>This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u392 (icedtea-3.29.0) October 2023 CPU: - CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379). - CVE-2023-22081: Fixed certificate path validation issue during client authentication (bsc#1216374). - CVE-2015-4000: Fixed Logjam issue in SLES12SP5 (bsc#1211968). </description> </patchinfo>