{"schema_version":"1.7.3","id":"SUSE-SU-2023:3023-1","published":"2023-07-28T20:00:02Z","modified":"2026-02-04T02:55:27.422788Z","related":["CVE-2023-22006","CVE-2023-22036","CVE-2023-22041","CVE-2023-22044","CVE-2023-22045","CVE-2023-22049","CVE-2023-25193"],"upstream":["CVE-2023-22006","CVE-2023-22036","CVE-2023-22041","CVE-2023-22044","CVE-2023-22045","CVE-2023-22049","CVE-2023-25193"],"summary":"Security update for java-17-openjdk","details":"This update for java-17-openjdk fixes the following issues:\n\n  Updated to version jdk-17.0.8+7 (July 2023 CPU):\n\n  - CVE-2023-22006: Fixed vulnerability in the network component (bsc#1213473).\n  - CVE-2023-22036: Fixed vulnerability in the utility component (bsc#1213474).\n  - CVE-2023-22041: Fixed vulnerability in the hotspot component (bsc#1213475).\n  - CVE-2023-22044: Fixed vulnerability in the hotspot component (bsc#1213479).\n  - CVE-2023-22045: Fixed vulnerability in the hotspot component (bsc#1213481).\n  - CVE-2023-22049: Fixed vulnerability in the libraries component (bsc#1213482).\n  - CVE-2023-25193: Fixed vulnerability in the embedded harfbuzz module (bsc#1207922).\n\n  - JDK-8294323: Improve Shared Class Data\n  - JDK-8296565: Enhanced archival support\n  - JDK-8298676, JDK-8300891: Enhanced Look and Feel\n  - JDK-8300285: Enhance TLS data handling\n  - JDK-8300596: Enhance Jar Signature validation\n  - JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1\n  - JDK-8302475: Enhance HTTP client file downloading\n  - JDK-8302483: Enhance ZIP performance\n  - JDK-8303376: Better launching of JDI\n  - JDK-8304460: Improve array usages\n  - JDK-8304468: Better array usages\n  - JDK-8305312: Enhanced path handling\n  - JDK-8308682: Enhance AES performance\n\n  Bugfixes:\n\n  - JDK-8178806: Better exception logging in crypto code\n  - JDK-8201516: DebugNonSafepoints generates incorrect\n    information\n  - JDK-8224768: Test ActalisCA.java fails\n  - JDK-8227060: Optimize safepoint cleanup subtask order\n  - JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java\n    fails with AssertionError\n  - JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel\n  - JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java\n    doesn' initialize eName\n  - JDK-8245877: assert(_value != __null) failed: resolving NULL\n    _value in JvmtiExport::post_compiled_method_load\n  - JDK-8248001: javadoc generates invalid HTML pages whose\n    ftp:// links are broken\n  - JDK-8252990: Intrinsify Unsafe.storeStoreFence\n  - JDK-8254711: Add java.security.Provider.getService JFR Event\n  - JDK-8257856: Make ClassFileVersionsTest.java robust to JDK\n    version updates\n  - JDK-8261495: Shenandoah: reconsider update references memory\n    ordering\n  - JDK-8268288: jdk/jfr/api/consumer/streaming/\n    /TestOutOfProcessMigration.java fails with 'Error:\n    ShouldNotReachHere()'\n  - JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java\n    fails: unexpected log message\n  - JDK-8268582: javadoc throws NPE with --ignore-source-errors\n    option\n  - JDK-8269821: Remove is-queue-active check in inner loop of\n    write_ref_array_pre_work\n  - JDK-8270434: JDI+UT: Unexpected event in JDI tests\n  - JDK-8270859: Post JEP 411 refactoring: client libs with\n    maximum covering > 10K\n  - JDK-8270869: G1ServiceThread may not terminate\n  - JDK-8271519: java/awt/event/SequencedEvent/\n    /MultipleContextsFunctionalTest.java failed with 'Total [200]\n    - Expected [400]'\n  - JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can\n    still fail with 'ERROR: new event is not ThreadStartEvent'\n  - JDK-8274243: Implement fast-path for ASCII-compatible\n    CharsetEncoders on aarch64\n  - JDK-8274615: Support relaxed atomic add for linux-aarch64\n  - JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile\n  - JDK-8275233: Incorrect line number reported in exception\n    stack trace thrown from a lambda expression\n  - JDK-8275287: Relax memory ordering constraints on updating\n    instance class and array class counters\n  - JDK-8275721: Name of UTC timezone in a locale changes\n    depending on previous code\n  - JDK-8275735: [linux] Remove deprecated Metrics api (kernel\n    memory limit)\n  - JDK-8276058: Some swing test fails on specific CI macos system\n  - JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/\n    /bug6276188.java fails to compile after JDK-8276058\n  - JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -\n    add 4357905\n  - JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly\n    identify it as pause\n  - JDK-8278434: timeouts in test  java/time/test/java/time/\n    /format/TestZoneTextPrinterParser.java\n  - JDK-8278834: Error 'Cannot read field 'sym' because\n    'this.lvar[od]' is null' when compiling\n  - JDK-8282077: PKCS11 provider C_sign() impl should handle\n    CKR_BUFFER_TOO_SMALL error\n  - JDK-8282201: Consider removal of expiry check in\n    VerifyCACerts.java test\n  - JDK-8282227: Locale information for nb is not working properly\n  - JDK-8282704: runtime/Thread/StopAtExit.java may leak memory\n  - JDK-8283057: Update GCC to version 11.2.0 for Oracle builds\n    on Linux\n  - JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2\n  - JDK-8283520: JFR: Memory leak in dcmd_arena\n  - JDK-8283566: G1: Improve G1BarrierSet::enqueue performance\n  - JDK-8284331: Add sanity check for signal handler modification\n    warning.\n  - JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java\n    failed with Default Button not pressed for L&F:\n    com.sun.java.swing.plaf.motif.MotifLookAndFeel\n  - JDK-8285987: executing shell scripts without #! fails on\n    Alpine linux\n  - JDK-8286191: misc tests fail due to JDK-8285987\n  - JDK-8286287: Reading file as UTF-16 causes Error which\n    'shouldn't happen'\n  - JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator\n  - JDK-8286346: 3-parameter version of AllocateHeap should not\n    ignore AllocFailType\n  - JDK-8286398: Address possibly lossy conversions in\n    jdk.internal.le\n  - JDK-8287007: [cgroups] Consistently use stringStream\n    throughout parsing code\n  - JDK-8287246: DSAKeyValue should check for missing params\n    instead of relying on KeyFactory provider\n  - JDK-8287541: Files.writeString fails to throw IOException for\n    charset 'windows-1252'\n  - JDK-8287854: Dangling reference in ClassVerifier::verify_class\n  - JDK-8287876: The recently de-problemlisted\n    TestTitledBorderLeak test is unstable\n  - JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md\n    with information on 4th party dependencies\n  - JDK-8288589: Files.readString ignores encoding errors for\n    UTF-16\n  - JDK-8289509: Improve test coverage for XPath Axes:\n    descendant, descendant-or-self, following, following-sibling\n  - JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space\n  - JDK-8289949: Improve test coverage for XPath: operators\n  - JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is\n    subject to undefined behavior\n  - JDK-8291226: Create Test Cases to cover scenarios for\n    JDK-8278067\n  - JDK-8291637: HttpClient default keep alive timeout not\n    followed if server sends invalid value\n  - JDK-8291638: Keep-Alive timeout of 0 should close connection\n    immediately\n  - JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()\n    is lower than expected\n  - JDK-8292301: [REDO v2] C2 crash when allocating array of size\n    too large\n  - JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests\n    resilience under spurious failures\n  - JDK-8292713: Unsafe.allocateInstance should be intrinsified\n    without UseUnalignedAccesses\n  - JDK-8292755: Non-default method in interface leads to a stack\n    overflow in JShell\n  - JDK-8292990: Improve test coverage for XPath Axes: parent\n  - JDK-8293295: Add type check asserts to\n    java_lang_ref_Reference accessors\n  - JDK-8293492: ShenandoahControlThread missing from hs-err log\n    and thread dump\n  - JDK-8293858: Change PKCS7 code to use default SecureRandom\n    impl instead of SHA1PRNG\n  - JDK-8293887: AArch64 build failure with GCC 12 due to\n    maybe-uninitialized warning in libfdlibm k_rem_pio2.c\n  - JDK-8294183: AArch64: Wrong macro check in\n    SharedRuntime::generate_deopt_blob\n  - JDK-8294281: Allow warnings to be disabled on a per-file basis\n  - JDK-8294673: JFR: Add SecurityProviderService#threshold to\n    TestActiveSettingEvent.java\n  - JDK-8294717: (bf) DirectByteBuffer constructor will leak if\n    allocating Deallocator or Cleaner fails with OOME\n  - JDK-8294906: Memory leak in PKCS11 NSS TLS server\n  - JDK-8295564: Norwegian Nynorsk Locale is missing formatting\n  - JDK-8295974: jni_FatalError and Xcheck:jni warnings should\n    print the native stack when there are no Java frames\n  - JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java\n    fails intermittently on a VM\n  - JDK-8296318: use-def assert: special case undetected loops\n    nested in infinite loops\n  - JDK-8296343: CPVE thrown on missing content-length in OCSP\n    response\n  - JDK-8296412: Special case infinite loops with unmerged\n    backedges in IdealLoopTree::check_safepts\n  - JDK-8296545: C2 Blackholes should allow load optimizations\n  - JDK-8296934: Write a test to verify whether Undecorated Frame\n    can be iconified or not\n  - JDK-8297000: [jib] Add more friendly warning for proxy issues\n  - JDK-8297154: Improve safepoint cleanup logging\n  - JDK-8297450: ScaledTextFieldBorderTest.java fails when run\n    with -show parameter\n  - JDK-8297587: Upgrade JLine to 3.22.0\n  - JDK-8297730: C2: Arraycopy intrinsic throws incorrect\n    exception\n  - JDK-8297955: LDAP CertStore should use LdapName and not\n    String for DNs\n  - JDK-8298488: [macos13] tools/jpackage tests failing with\n    'Exit code: 137' on macOS\n  - JDK-8298887: On the latest macOS+XCode the Robot API may\n    report wrong colors\n  - JDK-8299179: ArrayFill with store on backedge needs to reduce\n    length by 1\n  - JDK-8299259: C2: Div/Mod nodes without zero check could be\n    split through iv phi of loop resulting in SIGFPE\n  - JDK-8299544: Improve performance of CRC32C intrinsics\n    (non-AVX-512) for small inputs\n  - JDK-8299570: [JVMCI] Insufficient error handling when\n    CodeBuffer is exhausted\n  - JDK-8299959: C2: CmpU::Value must filter overflow computation\n    against local sub computation\n  - JDK-8300042: Improve CPU related JFR events descriptions\n  - JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy\n    due to constant NULL src argument\n  - JDK-8300823: UB: Compile::_phase_optimize_finished is\n    initialized too late\n  - JDK-8300939: sun/security/provider/certpath/OCSP/\n    /OCSPNoContentLength.java fails due to network errors\n  - JDK-8301050: Detect Xen Virtualization on Linux aarch64\n  - JDK-8301119: Support for GB18030-2022\n  - JDK-8301123: Enable Symbol refcounting underflow checks in\n    PRODUCT\n  - JDK-8301190: [vectorapi] The typeChar of LaneType is\n    incorrect when default locale is tr\n  - JDK-8301216: ForkJoinPool invokeAll() ignores timeout\n  - JDK-8301338: Identical branch conditions in\n    CompileBroker::print_heapinfo\n  - JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic\n    called with negative character argument\n  - JDK-8301637: ThreadLocalRandom.current().doubles().parallel()\n    contention\n  - JDK-8301661: Enhance os::pd_print_cpu_info on macOS and\n    Windows\n  - JDK-8302151: BMPImageReader throws an exception reading BMP\n    images\n  - JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined\n    must respect ForceInline\n  - JDK-8302320: AsyncGetCallTrace obtains too few frames in\n    sanity test\n  - JDK-8302491: NoClassDefFoundError omits the original cause of\n    an error\n  - JDK-8302508: Add timestamp to the output TraceCompilerThreads\n  - JDK-8302594: use-after-free in Node::destruct\n  - JDK-8302595: use-after-free related to GraphKit::clone_map\n  - JDK-8302791: Add specific ClassLoader object to Proxy\n    IllegalArgumentException message\n  - JDK-8302849: SurfaceManager might expose partially\n    constructed object\n  - JDK-8303069: Memory leak in CompilerOracle::parse_from_line\n  - JDK-8303102: jcmd: ManagementAgent.status truncates the text\n    longer than O_BUFLEN\n  - JDK-8303130: Document required Accessibility permissions on\n    macOS\n  - JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m\n    needs CFRelease call in early potential CHECK_NULL return\n  - JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8\n  - JDK-8303440: The 'ZonedDateTime.parse' may not accept the\n    'UTC+XX' zone id\n  - JDK-8303465: KeyStore of type KeychainStore, provider Apple\n    does not show all trusted certificates\n  - JDK-8303476: Add the runtime version in the release file of a\n    JDK image\n  - JDK-8303482: Update LCMS to 2.15\n  - JDK-8303508: Vector.lane() gets wrong value on x86\n  - JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during\n    unrolling\n  - JDK-8303564: C2: 'Bad graph detected in build_loop_late'\n    after a CMove is wrongly split thru phi\n  - JDK-8303575: adjust Xen handling on Linux aarch64\n  - JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs\n    CFRelease call in early potential CHECK_NULL return\n  - JDK-8303588: [JVMCI] make JVMCI source directories conform\n    with standard layout\n  - JDK-8303809: Dispose context in SPNEGO NegotiatorImpl\n  - JDK-8303822: gtestMain should give more helpful output\n  - JDK-8303861: Error handling step timeouts should never be\n    blocked by OnError and others\n  - JDK-8303937: Corrupted heap dumps due to missing retries for\n    os::write()\n  - JDK-8303949: gcc10 warning Linux ppc64le - note: the layout\n    of aggregates containing vectors with 8-byte alignment has\n    changed in GCC 5\n  - JDK-8304054: Linux: NullPointerException from\n    FontConfiguration.getVersion in case no fonts are installed\n  - JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java\n    fails when checking LD_LIBRARY_PATH\n  - JDK-8304134: jib bootstrapper fails to quote filename when\n    checking download filetype\n  - JDK-8304291: [AIX] Broken build after JDK-8301998\n  - JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998\n  - JDK-8304350: Font.getStringBounds calculates wrong width for\n    TextAttribute.TRACKING other than 0.0\n  - JDK-8304671: javac regression: Compilation with --release 8\n    fails on underscore in enum identifiers\n  - JDK-8304683: Memory leak in WB_IsMethodCompatible\n  - JDK-8304760: Add 2 Microsoft TLS roots\n  - JDK-8304867: Explicitly disable dtrace for ppc builds\n  - JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with\n    ZGC\n  - JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic\n  - JDK-8305113: (tz) Update Timezone Data to 2023c\n  - JDK-8305400: ISO 4217 Amendment 175 Update\n  - JDK-8305403: Shenandoah evacuation workers may deadlock\n  - JDK-8305481: gtest is_first_C_frame failing on ARM\n  - JDK-8305690: [X86] Do not emit two REX prefixes in\n    Assembler::prefix\n  - JDK-8305711: Arm: C2 always enters slowpath for monitorexit\n  - JDK-8305721: add `make compile-commands` artifacts to\n    .gitignore\n  - JDK-8305975: Add TWCA Global Root CA\n  - JDK-8305993: Add handleSocketErrorWithMessage to extend nio\n    Net.c exception message\n  - JDK-8305994: Guarantee eventual async monitor deflation\n  - JDK-8306072: Open source several AWT MouseInfo related tests\n  - JDK-8306133: Open source few AWT Drag & Drop related tests\n  - JDK-8306409: Open source AWT KeyBoardFocusManger,\n    LightWeightComponent related tests\n  - JDK-8306432: Open source several AWT Text Component related\n    tests\n  - JDK-8306466: Open source more AWT Drag & Drop related tests\n  - JDK-8306489: Open source AWT List related tests\n  - JDK-8306543: GHA: MSVC installation is failing\n  - JDK-8306640: Open source several AWT TextArea related tests\n  - JDK-8306652: Open source AWT MenuItem related tests\n  - JDK-8306658: GHA: MSVC installation could be optional since\n    it might already be pre-installed\n  - JDK-8306664: GHA: Update MSVC version to latest stepping\n  - JDK-8306681: Open source more AWT DnD related tests\n  - JDK-8306683: Open source several clipboard and color AWT tests\n  - JDK-8306752: Open source several container and component AWT\n    tests\n  - JDK-8306753: Open source several container AWT tests\n  - JDK-8306755: Open source few Swing JComponent and\n    AbstractButton tests\n  - JDK-8306768: CodeCache Analytics reports wrong threshold\n  - JDK-8306774: Make runtime/Monitor/\n    /GuaranteedAsyncDeflationIntervalTest.java more reliable\n  - JDK-8306825: Monitor deflation might be accidentally disabled\n    by zero intervals\n  - JDK-8306850: Open source AWT Modal related tests\n  - JDK-8306871: Open source more AWT Drag & Drop tests\n  - JDK-8306883: Thread stacksize is reported with wrong units in\n    os::create_thread logging\n  - JDK-8306941: Open source several datatransfer and dnd AWT\n    tests\n  - JDK-8306943: Open source several dnd AWT tests\n  - JDK-8306954: Open source five Focus related tests\n  - JDK-8306955: Open source several JComboBox jtreg tests\n  - JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep\n  - JDK-8306996: Open source Swing MenuItem related tests\n  - JDK-8307080: Open source some more JComboBox jtreg tests\n  - JDK-8307128: Open source some drag and drop tests 4\n  - JDK-8307130: Open source few Swing JMenu tests\n  - JDK-8307133: Open source some JTable jtreg tests\n  - JDK-8307134: Add GTS root CAs\n  - JDK-8307135: java/awt/dnd/NotReallySerializableTest/\n    /NotReallySerializableTest.java failed\n  - JDK-8307331: Correctly update line maps when class redefine\n    rewrites bytecodes\n  - JDK-8307346: Add missing gc+phases logging for\n    ObjectCount(AfterGC) JFR event collection code\n  - JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could\n    leave files owned by root on macOS\n  - JDK-8307378: Allow collectors to provide specific values for\n    GC notifications' actions\n  - JDK-8307381: Open Source JFrame, JIF related Swing Tests\n  - JDK-8307425: Socket input stream read burns CPU cycles with\n    back-to-back poll(0) calls\n  - JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has\n    invalid jtreg `@requires` clause\n  - JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not\n    removed from ExternalEditorTest\n  - JDK-8308880: [17u] micro bench ZoneStrings missed in backport\n    of 8278434\n  - JDK-8308884: [17u/11u] Backout JDK-8297951\n  - JDK-8311467: [17u] Remove designator\n    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8\n","affected":[{"package":{"name":"java-17-openjdk","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","purl":"pkg:rpm/suse/java-17-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.8.0-150400.3.27.1"}]}],"ecosystem_specific":{"binaries":[{"java-17-openjdk":"17.0.8.0-150400.3.27.1","java-17-openjdk-demo":"17.0.8.0-150400.3.27.1","java-17-openjdk-devel":"17.0.8.0-150400.3.27.1","java-17-openjdk-headless":"17.0.8.0-150400.3.27.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3023-1.json"}},{"package":{"name":"java-17-openjdk","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","purl":"pkg:rpm/suse/java-17-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.8.0-150400.3.27.1"}]}],"ecosystem_specific":{"binaries":[{"java-17-openjdk":"17.0.8.0-150400.3.27.1","java-17-openjdk-demo":"17.0.8.0-150400.3.27.1","java-17-openjdk-devel":"17.0.8.0-150400.3.27.1","java-17-openjdk-headless":"17.0.8.0-150400.3.27.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3023-1.json"}},{"package":{"name":"java-17-openjdk","ecosystem":"openSUSE:Leap 15.4","purl":"pkg:rpm/opensuse/java-17-openjdk&distro=openSUSE%20Leap%2015.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.8.0-150400.3.27.1"}]}],"ecosystem_specific":{"binaries":[{"java-17-openjdk":"17.0.8.0-150400.3.27.1","java-17-openjdk-demo":"17.0.8.0-150400.3.27.1","java-17-openjdk-devel":"17.0.8.0-150400.3.27.1","java-17-openjdk-headless":"17.0.8.0-150400.3.27.1","java-17-openjdk-javadoc":"17.0.8.0-150400.3.27.1","java-17-openjdk-jmods":"17.0.8.0-150400.3.27.1","java-17-openjdk-src":"17.0.8.0-150400.3.27.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3023-1.json"}},{"package":{"name":"java-17-openjdk","ecosystem":"openSUSE:Leap 15.5","purl":"pkg:rpm/opensuse/java-17-openjdk&distro=openSUSE%20Leap%2015.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.8.0-150400.3.27.1"}]}],"ecosystem_specific":{"binaries":[{"java-17-openjdk":"17.0.8.0-150400.3.27.1","java-17-openjdk-demo":"17.0.8.0-150400.3.27.1","java-17-openjdk-devel":"17.0.8.0-150400.3.27.1","java-17-openjdk-headless":"17.0.8.0-150400.3.27.1","java-17-openjdk-javadoc":"17.0.8.0-150400.3.27.1","java-17-openjdk-jmods":"17.0.8.0-150400.3.27.1","java-17-openjdk-src":"17.0.8.0-150400.3.27.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:3023-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233023-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1207922"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213473"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213474"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213475"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213479"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213481"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213482"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22006"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22036"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22041"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22044"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22045"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-22049"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-25193"}]}