Debian Bug report logs -
#1015860
libxalan2-java: CVE-2022-34169
Package:
src:libxalan2-java;
Maintainer for src:libxalan2-java is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>;
Reported by: Moritz Mühlenhoff <jmm@inutilorg>
Date: Fri, 22 Jul 2022 15:21:01 UTC
Severity: grave
Tags: security ...
Several security issues were fixed in OpenJDK 8 ...
Several security issues were fixed in OpenJDK ...
Several vulnerabilities have been discovered in the OpenJDK Java runtime,
which may result in the execution of arbitrary Java bytecode or the
bypass of the Java sandbox
For the oldstable distribution (buster), these problems have been fixed
in version 11016+8-1~deb10u1
For the stable distribution (bullseye), these problems have been fixed in
ve ...
Several vulnerabilities have been discovered in the OpenJDK Java runtime,
which may result in the execution of arbitrary Java bytecode or the
bypass of the Java sandbox
For the stable distribution (bullseye), this problem has been fixed in
version 1704+8-1~deb11u1
We recommend that you upgrade your openjdk-17 packages
For the detailed security ...
The Apache Xalan Java XSLT library is vulnerable to an integer truncation
issue when processing malicious XSLT stylesheets This can be used to corrupt
Java class files generated by the internal XSLTC compiler and execute arbitrary
Java bytecode In Debian the vulnerable code is in the bcel source package
For the stable distribution (bullseye), th ...
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11013, 1701; Oracle GraalVM Enterprise Edition: 2034 and 2130 Difficult to exploit vulnerability allows unauthenticated attacker with network acce ...
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11013, 1701; Oracle GraalVM Enterprise Edition: 2034 and 2130 Difficult to exploit vulnerability allows unauthenticated attacker with network acce ...
概述
Important: java-17-openjdk security, bug fix, and enhancement update
类型/严重性
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
标题
An update for java-17-openjdk is now available for Red Hat Enterprise Linux 8Red Hat Product ...
Synopsis
Important: OpenJDK 8u342 security update for Portable Linux Builds
Type/Severity
Security Advisory: Important
Topic
The Red Hat build of OpenJDK 8 (java-180-openjdk) is now available for portable LinuxRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVS ...
Synopsis
Important: OpenJDK 8u342 Windows builds release and security update
Type/Severity
Security Advisory: Important
Topic
The Red Hat build of OpenJDK 8 (java-180-openjdk) is now available for WindowsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) bas ...
Synopsis
Important: java-180-openjdk security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-180-openjdk is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsR ...
概述
Important: OpenJDK 11016 Security Update for Portable Linux Builds
类型/严重性
Security Advisory: Important
标题
The Red Hat Build of OpenJDK 11 (java-11-openjdk) is now available for portable LinuxRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...
Synopsis
Important: java-17-openjdk security, bug fix, and enhancement update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-17-openjdk is now available for Red Hat Enterprise Linux 9Red Hat Product S ...
Synopsis
Important: java-11-openjdk security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsRed Hat ...
Synopsis
Important: java-11-openjdk security, bug fix, and enhancement update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 9Red Hat Product S ...
概述
Important: OpenJDK 1704 security update for Windows Builds
类型/严重性
Security Advisory: Important
标题
The Red Hat build of OpenJDK 17 (java-17-openjdk) is now available for WindowsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score ...
Synopsis
Important: java-11-openjdk security, bug fix, and enhancement update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7Red Hat Product S ...
Synopsis
Important: java-180-openjdk security, bug fix, and enhancement update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-180-openjdk is now available for Red Hat Enterprise Linux 8Red Hat Pro ...
Synopsis
Important: java-180-openjdk security, bug fix, and enhancement update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-180-openjdk is now available for Red Hat Enterprise Linux 7Red Hat Pro ...
Synopsis
Important: java-180-openjdk security and bug fix update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-180-openjdk is now available for Red Hat Enterprise Linux 84 Extended Update Support ...
概述
Important: OpenJDK 11016 security update for Windows Builds
类型/严重性
Security Advisory: Important
标题
The Red Hat Build of OpenJDK 11 (java-11-openjdk) is now available for WindowsRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base scor ...
Synopsis
Important: java-180-openjdk security, bug fix, and enhancement update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-180-openjdk is now available for Red Hat Enterprise Linux 9Red Hat Pro ...
Synopsis
Important: java-11-openjdk security, bug fix, and enhancement update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8Red Hat Product S ...
Synopsis
Important: java-180-openjdk security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-180-openjdk is now available for Red Hat Enterprise Linux 82 Extended Update SupportRed Hat Pro ...
Synopsis
Important: java-11-openjdk security update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 82 Extended Update SupportRed Hat Product S ...
Synopsis
Important: java-11-openjdk security and bug fix update
Type/Severity
Security Advisory: Important
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory
View affected systems
Topic
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 84 Extended Update SupportRed H ...
概述
Important: OpenJDK 1704 Security Update for Portable Linux Builds
类型/严重性
Security Advisory: Important
标题
The Red Hat build of OpenJDK 17 (java-17-openjdk) is now available for portable LinuxRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CV ...
Synopsis
Important: Release of OpenShift Serverless 1240
Type/Severity
Security Advisory: Important
Topic
Release of OpenShift Serverless 1240The References section contains CVE links providing detailed severity ratingsfor each vulnerability Ratings are based on a Common Vulnerability ScoringSystem (CVSS) base score
Description
Versio ...
Synopsis
Moderate: Openshift Logging Bug Fix and security update Release (5213)
Type/Severity
Security Advisory: Moderate
Topic
Openshift Logging Bug Fix Release (5213)Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed seve ...
Synopsis
Moderate: Openshift Logging Bug Fix and security update Release (5310)
Type/Severity
Security Advisory: Moderate
Topic
Openshift Logging Bug Fix Release (5310)Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed seve ...
Synopsis
Moderate: OpenShift Container Platform 4661 security and extras update
Type/Severity
Security Advisory: Moderate
Topic
Red Hat OpenShift Container Platform release 4661 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Conta ...
Synopsis
Moderate: OpenShift Container Platform 4756 security and bug fix update
Type/Severity
Security Advisory: Moderate
Topic
Red Hat OpenShift Container Platform release 4756 is now available withupdates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a securit ...
Synopsis
Moderate: OpenShift Container Platform 41025 bug fix and security update
Type/Severity
Security Advisory: Moderate
Topic
Red Hat OpenShift Container Platform release 41025 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Co ...
Synopsis
Important: OpenShift Container Platform 4945 bug fix and security update
Type/Severity
Security Advisory: Important
Topic
Red Hat OpenShift Container Platform release 4945 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Co ...
Synopsis
Moderate: OpenShift Container Platform 311784 security update
Type/Severity
Security Advisory: Moderate
Topic
Red Hat OpenShift Container Platform release 311784 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Container Pl ...
Synopsis
Important: OpenShift Container Platform 4661 bug fix and security update
Type/Severity
Security Advisory: Important
Topic
Red Hat OpenShift Container Platform release 4661 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Co ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
The Xalan Java XSLT library has an integer truncation issue when processing malicious stylesheets This can be used to cor ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
computeNextExponential sometimes returns negative numbers contrary to the documentation (CVE-2022-21549)
The Xalan Java X ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
The Xalan Java XSLT library has an integer truncation issue when processing malicious stylesheets This can be used to cor ...
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11014, 1702, 18; Oracle GraalVM Enterprise Edition: 2035, 2131 and 22002 Easily exploitable vulnerability allows unauthenticated attacker with network ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
The Xalan Java XSLT library has an integer truncation issue when processing malicious stylesheets This can be used to cor ...
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11013, 1701; Oracle GraalVM Enterprise Edition: 2034 and 2130 Difficult to exploit vulnerability allows unauthenticated attacker with network acce ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
The Xalan Java XSLT library has an integer truncation issue when processing malicious stylesheets This can be used to cor ...
Multiple vulnerabilities have been found in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center
CVE-2022-21540, CVE-2022-21541, CVE-2022-34169
Affected products and versions are listed below Please upgrade your version to the appropriate version, or ...
Cosminexus Developer's Kit for Java(TM) and Hitachi Developer's Kit for Java contain the following vulnerabilities:
CVE-2022-21540, CVE-2022-21541, CVE-2022-34169
Cosminexus XML Processor contain the following vulnerability:
CVE-2022-34169
Affected products and versions are listed below Please upgrade your version to the appropriate vers ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
computeNextExponential sometimes returns negative numbers contrary to the documentation (CVE-2022-21549)
The Xalan Java X ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
The Xalan Java XSLT library has an integer truncation issue when processing malicious stylesheets This can be used to cor ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
computeNextExponential sometimes returns negative numbers contrary to the documentation (CVE-2022-21549)
The Xalan Java X ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
The Xalan Java XSLT library has an integer truncation issue when processing malicious stylesheets This can be used to cor ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
The Xalan Java XSLT library has an integer truncation issue when processing malicious stylesheets This can be used to cor ...
Generated code produced by C1 may leak a package-private class to a class from a different package (CVE-2022-21540)
MethodHandleinvokeBasic() method can be accessed on byte code level from an arbitrary class (CVE-2022-21541)
The Xalan Java XSLT library has an integer truncation issue when processing malicious stylesheets This can be used to cor ...
Vulmon