{"id":"CLSA-2023-1703610997","summary":"Fix of 5 CVEs","details":"\n   * Backport upstream releases 8u392 to 18.04 LTS\n   * CVEs fixed in 8u392:\n     - CVE-2023-22067: IOR deserialization issue in CORBA\n     - CVE-2023-22081: Certificate path validation issue\n   * CVEs fixed in 8u382:\n     - CVE-2023-22045: OpenJDK incorrectly handled array accesses.\n     - CVE-2023-22049: OpenJDK incorrectly sanitized URIs strings.\n   * Drop applied CVE-2022-40433.patch (changes are already in the sources)","modified":"2026-06-04T10:04:28.205380478Z","published":"2023-12-26T17:16:45Z","upstream":["CVE-2022-40433","CVE-2023-22045","CVE-2023-22049","CVE-2023-22067","CVE-2023-22081"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1703610997"}],"affected":[{"package":{"name":"openjdk-8-demo","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-demo?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703610997.json"}},{"package":{"name":"openjdk-8-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703610997.json"}},{"package":{"name":"openjdk-8-jdk","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-jdk?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703610997.json"}},{"package":{"name":"openjdk-8-jdk-headless","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-jdk-headless?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703610997.json"}},{"package":{"name":"openjdk-8-jre","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-jre?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703610997.json"}},{"package":{"name":"openjdk-8-jre-headless","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-jre-headless?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703610997.json"}},{"package":{"name":"openjdk-8-jre-zero","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-jre-zero?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703610997.json"}},{"package":{"name":"openjdk-8-source","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-source?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703610997.json"}}],"schema_version":"1.7.5"}