File _patchinfo of Package patchinfo.27846
<patchinfo incident="27846">
<issue tracker="cve" id="2023-21843"/>
<issue tracker="cve" id="2023-21830"/>
<issue tracker="bnc" id="1207249">VUL-0: CVE-2023-21830: java-openjdk: improper restrictions in CORBA deserialization (Serialization, 8285021)</issue>
<issue tracker="bnc" id="1207248">VUL-0: CVE-2023-21843: java-openjdk: soundbank URL remote loading (Sound, 8293742)</issue>
<packager>fstrba</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for java-1_8_0-openjdk</summary>
<description>This update for java-1_8_0-openjdk fixes the following issues:
Updated to version jdk8u362 (icedtea-3.26.0):
- CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249).
- CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).
</description>
</patchinfo>