File _patchinfo of Package patchinfo.27846

<patchinfo incident="27846">
  <issue tracker="cve" id="2023-21843"/>
  <issue tracker="cve" id="2023-21830"/>
  <issue tracker="bnc" id="1207249">VUL-0: CVE-2023-21830: java-openjdk: improper restrictions in CORBA deserialization (Serialization, 8285021)</issue>
  <issue tracker="bnc" id="1207248">VUL-0: CVE-2023-21843: java-openjdk: soundbank URL remote loading (Sound, 8293742)</issue>
  <packager>fstrba</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for java-1_8_0-openjdk</summary>
  <description>This update for java-1_8_0-openjdk fixes the following issues:

  Updated to version jdk8u362 (icedtea-3.26.0):
 
  - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249).
  - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).
</description>
</patchinfo>
openSUSE Build Service is sponsored by