Bugzilla – Bug 1191902
VUL-0: CVE-2021-35560: java-1_8_0-openjdk,java-11-openjdk,java-1_7_0-openjdk: Vulnerability in the Java SE product of Oracle Java SE (component: Deployment).
Last modified: 2023-01-10 14:57:35 UTC
CVE-2021-35560 Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-35560 https://www.oracle.com/security-alerts/cpuoct2021.html#CVE-2021-35560 https://www.oracle.com/security-alerts/cpuoct2021.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35560
Not affecting SLE.
SUSE-SU-2022:0107-1: An update that solves 12 vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1185055,1188564,1188565,1191902,1191904,1191905,1191909,1191910,1191911,1191913,1191914,1192052,1194198,1194232 CVE References: CVE-2021-2163,CVE-2021-2341,CVE-2021-2369,CVE-2021-35556,CVE-2021-35559,CVE-2021-35560,CVE-2021-35564,CVE-2021-35565,CVE-2021-35578,CVE-2021-35586,CVE-2021-35588,CVE-2021-41035 JIRA References: Sources used: SUSE OpenStack Cloud Crowbar 9 (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE OpenStack Cloud Crowbar 8 (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE OpenStack Cloud 9 (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE OpenStack Cloud 8 (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE Linux Enterprise Server for SAP 12-SP4 (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE Linux Enterprise Server for SAP 12-SP3 (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE Linux Enterprise Server 12-SP5 (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE Linux Enterprise Server 12-SP4-LTSS (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE Linux Enterprise Server 12-SP3-LTSS (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE Linux Enterprise Server 12-SP3-BCL (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 HPE Helion Openstack 8 (src): java-1_8_0-ibm-1.8.0_sr7.0-30.84.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2022:0108-1: An update that solves 12 vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1185055,1188564,1188565,1191902,1191904,1191905,1191909,1191910,1191911,1191913,1191914,1192052,1194198,1194232 CVE References: CVE-2021-2163,CVE-2021-2341,CVE-2021-2369,CVE-2021-35556,CVE-2021-35559,CVE-2021-35560,CVE-2021-35564,CVE-2021-35565,CVE-2021-35578,CVE-2021-35586,CVE-2021-35588,CVE-2021-41035 JIRA References: Sources used: openSUSE Leap 15.3 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1
SUSE-SU-2022:0108-1: An update that solves 12 vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1185055,1188564,1188565,1191902,1191904,1191905,1191909,1191910,1191911,1191913,1191914,1192052,1194198,1194232 CVE References: CVE-2021-2163,CVE-2021-2341,CVE-2021-2369,CVE-2021-35556,CVE-2021-35559,CVE-2021-35560,CVE-2021-35564,CVE-2021-35565,CVE-2021-35578,CVE-2021-35586,CVE-2021-35588,CVE-2021-41035 JIRA References: Sources used: SUSE Manager Server 4.1 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Manager Retail Branch Server 4.1 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Manager Proxy 4.1 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Linux Enterprise Server for SAP 15-SP2 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Linux Enterprise Server for SAP 15 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Linux Enterprise Server 15-SP2-LTSS (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Linux Enterprise Server 15-LTSS (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Linux Enterprise Module for Legacy Software 15-SP3 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Enterprise Storage 7 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE Enterprise Storage 6 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE CaaS Platform 4.5 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 SUSE CaaS Platform 4.0 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2022:0108-1: An update that solves 12 vulnerabilities and has three fixes is now available. Category: security (important) Bug References: 1185055,1188564,1188565,1191902,1191904,1191905,1191909,1191910,1191911,1191913,1191914,1192052,1194198,1194232,1197518 CVE References: CVE-2021-2163,CVE-2021-2341,CVE-2021-2369,CVE-2021-35556,CVE-2021-35559,CVE-2021-35560,CVE-2021-35564,CVE-2021-35565,CVE-2021-35578,CVE-2021-35586,CVE-2021-35588,CVE-2021-41035 JIRA References: Sources used: openSUSE Leap 15.3 (src): java-1_8_0-ibm-1.8.0_sr7.0-3.53.1, seamonkey-2.53.11.1-lp153.17.5.1