rpm package

suse/java-1_7_1-ibm&distro=SUSE OpenStack Cloud Crowbar 9

pkg:rpm/suse/java-1_7_1-ibm&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209

Vulnerabilities (56)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2022-3676	Med	6.5	< 1.7.1_sr5.15-38.77.1	1.7.1_sr5.15-38.77.1	Oct 24, 2022	In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.
CVE-2022-21549	Med	5.3	< 1.7.1_sr5.15-38.74.1	1.7.1_sr5.15-38.74.1	Jul 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allow
CVE-2022-21541	Med	5.9	< 1.7.1_sr5.15-38.74.1	1.7.1_sr5.15-38.74.1	Jul 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.
CVE-2022-21540	Med	5.3	< 1.7.1_sr5.15-38.74.1	1.7.1_sr5.15-38.74.1	Jul 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.
CVE-2022-34169	Hig	7.5	< 1.7.1_sr5.15-38.74.1	1.7.1_sr5.15-38.74.1	Jul 19, 2022	The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update t
CVE-2022-21496	Med	5.3	< 1.7.1_sr5.10-38.71.1	1.7.1_sr5.10-38.71.1	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily e
CVE-2022-21476	Hig	7.5	< 1.7.1_sr5.10-38.71.1	1.7.1_sr5.10-38.71.1	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Eas
CVE-2022-21449	Hig	7.5	< 1.7.1_sr5.10-38.71.1	1.7.1_sr5.10-38.71.1	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerabilit
CVE-2022-21443	Low	3.7	< 1.7.1_sr5.10-38.71.1	1.7.1_sr5.10-38.71.1	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Dif
CVE-2022-21434	Med	5.3	< 1.7.1_sr5.10-38.71.1	1.7.1_sr5.10-38.71.1	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Eas
CVE-2022-21426	Med	5.3	< 1.7.1_sr5.10-38.71.1	1.7.1_sr5.10-38.71.1	Apr 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily e
CVE-2022-21366	Med	5.3	< 1.7.1_sr5.5-38.68.1	1.7.1_sr5.5-38.68.1	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability
CVE-2022-21365	Med	5.3	< 1.7.1_sr5.5-38.68.1	1.7.1_sr5.5-38.68.1	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable
CVE-2022-21360	Med	5.3	< 1.7.1_sr5.5-38.68.1	1.7.1_sr5.5-38.68.1	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable
CVE-2022-21349	Med	5.3	< 1.7.1_sr5.5-38.68.1	1.7.1_sr5.5-38.68.1	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows u
CVE-2022-21341	Med	5.3	< 1.7.1_sr5.5-38.68.1	1.7.1_sr5.5-38.68.1	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploi
CVE-2022-21340	Med	5.3	< 1.7.1_sr5.5-38.68.1	1.7.1_sr5.5-38.68.1	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitabl
CVE-2022-21305	Med	5.3	< 1.7.1_sr5.5-38.68.1	1.7.1_sr5.5-38.68.1	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable
CVE-2022-21299	Med	5.3	< 1.7.1_sr5.5-38.68.1	1.7.1_sr5.5-38.68.1	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vul
CVE-2022-21296	Med	5.3	< 1.7.1_sr5.5-38.68.1	1.7.1_sr5.5-38.68.1	Jan 19, 2022	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vul

CVE-2022-3676MedOct 24, 2022
affected < 1.7.1_sr5.15-38.77.1fixed 1.7.1_sr5.15-38.77.1
In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. Malicious bytecode could make use of this inlining to access or modify memory via an incompatible type.
CVE-2022-21549MedJul 19, 2022
affected < 1.7.1_sr5.15-38.74.1fixed 1.7.1_sr5.15-38.74.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allow
CVE-2022-21541MedJul 19, 2022
affected < 1.7.1_sr5.15-38.74.1fixed 1.7.1_sr5.15-38.74.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.
CVE-2022-21540MedJul 19, 2022
affected < 1.7.1_sr5.15-38.74.1fixed 1.7.1_sr5.15-38.74.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.
CVE-2022-34169HigJul 19, 2022
affected < 1.7.1_sr5.15-38.74.1fixed 1.7.1_sr5.15-38.74.1
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update t
CVE-2022-21496MedApr 19, 2022
affected < 1.7.1_sr5.10-38.71.1fixed 1.7.1_sr5.10-38.71.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily e
CVE-2022-21476HigApr 19, 2022
affected < 1.7.1_sr5.10-38.71.1fixed 1.7.1_sr5.10-38.71.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Eas
CVE-2022-21449HigApr 19, 2022
affected < 1.7.1_sr5.10-38.71.1fixed 1.7.1_sr5.10-38.71.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2. Easily exploitable vulnerabilit
CVE-2022-21443LowApr 19, 2022
affected < 1.7.1_sr5.10-38.71.1fixed 1.7.1_sr5.10-38.71.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Dif
CVE-2022-21434MedApr 19, 2022
affected < 1.7.1_sr5.10-38.71.1fixed 1.7.1_sr5.10-38.71.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Eas
CVE-2022-21426MedApr 19, 2022
affected < 1.7.1_sr5.10-38.71.1fixed 1.7.1_sr5.10-38.71.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily e
CVE-2022-21366MedJan 19, 2022
affected < 1.7.1_sr5.5-38.68.1fixed 1.7.1_sr5.5-38.68.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability
CVE-2022-21365MedJan 19, 2022
affected < 1.7.1_sr5.5-38.68.1fixed 1.7.1_sr5.5-38.68.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable
CVE-2022-21360MedJan 19, 2022
affected < 1.7.1_sr5.5-38.68.1fixed 1.7.1_sr5.5-38.68.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable
CVE-2022-21349MedJan 19, 2022
affected < 1.7.1_sr5.5-38.68.1fixed 1.7.1_sr5.5-38.68.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows u
CVE-2022-21341MedJan 19, 2022
affected < 1.7.1_sr5.5-38.68.1fixed 1.7.1_sr5.5-38.68.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploi
CVE-2022-21340MedJan 19, 2022
affected < 1.7.1_sr5.5-38.68.1fixed 1.7.1_sr5.5-38.68.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitabl
CVE-2022-21305MedJan 19, 2022
affected < 1.7.1_sr5.5-38.68.1fixed 1.7.1_sr5.5-38.68.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable
CVE-2022-21299MedJan 19, 2022
affected < 1.7.1_sr5.5-38.68.1fixed 1.7.1_sr5.5-38.68.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vul
CVE-2022-21296MedJan 19, 2022
affected < 1.7.1_sr5.5-38.68.1fixed 1.7.1_sr5.5-38.68.1
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vul

Page 1 of 3