{"id":"CLSA-2022-1669309108","summary":"Fix CVE(s): CVE-2022-21628, CVE-2022-21626, CVE-2022-21624, CVE-2022-21619","details":"\n   * Backport upstream releases 8u352 to 16.04 LTS\n   * Security fixes in 8u352:\n     - JDK-8282252: Improve BigInteger/Decimal validation\n     - JDK-8285662: Better permission resolution\n     - JDK-8286511: Improve macro allocation\n     - JDK-8286519: Better memory handling\n     - JDK-8286526, CVE-2022-21619: Improve NTLM support\n     - JDK-8286533, CVE-2022-21626: Key X509 usages\n     - JDK-8286910, CVE-2022-21624: Improve JNDI lookups\n     - JDK-8286918, CVE-2022-21628: Better HttpServer service\n     - JDK-8288508: Enhance ECDSA usage\n   * Drop applied patch pr88.diff","modified":"2026-06-04T10:04:56.472354522Z","published":"2022-11-24T16:58:28Z","upstream":["CVE-2022-21619","CVE-2022-21624","CVE-2022-21626","CVE-2022-21628"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2022-1669309108"}],"affected":[{"package":{"name":"openjdk-8-demo","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/openjdk-8-demo?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u352-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1669309108.json"}},{"package":{"name":"openjdk-8-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/openjdk-8-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u352-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1669309108.json"}},{"package":{"name":"openjdk-8-jdk","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/openjdk-8-jdk?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u352-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1669309108.json"}},{"package":{"name":"openjdk-8-jdk-headless","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/openjdk-8-jdk-headless?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u352-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1669309108.json"}},{"package":{"name":"openjdk-8-jre","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/openjdk-8-jre?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u352-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1669309108.json"}},{"package":{"name":"openjdk-8-jre-headless","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/openjdk-8-jre-headless?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u352-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1669309108.json"}},{"package":{"name":"openjdk-8-jre-jamvm","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/openjdk-8-jre-jamvm?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u352-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1669309108.json"}},{"package":{"name":"openjdk-8-jre-zero","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/openjdk-8-jre-zero?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u352-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1669309108.json"}},{"package":{"name":"openjdk-8-source","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/openjdk-8-source?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u352-ga-0ubuntu1~16.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1669309108.json"}}],"schema_version":"1.7.5"}