{"id":"CVE-2023-5676","aliases":["EUVD-2023-57967","GHSA-5ch2-qvr7-76ch","RHSA-2024:0866","RHSA-2024:0879","SUSE-SU-2023:4572-1","SUSE-SU-2023:4612-1","SUSE-SU-2023:4614-1","SUSE-SU-2024:0479-1","openSUSE-SU-2024:13455-1","openSUSE-SU-2024:13456-1","openSUSE-SU-2024:13457-1","openSUSE-SU-2025:0066-1","openSUSE-SU-2025:0067-1"],"status":"published","title":"Eclipse OpenJ9 possible infinite busy hang","description":"In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.","severity":{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00406,"percentile":0.35194,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362","CWE-364"],"published":"2023-11-15T14:02:01Z","modified":"2026-10-28T02:30:59Z","affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::supplementary","package":"java-1.8.0-ibm-webstart","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_extras:7","package":"java-1.8.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.8.15-1jpp.1.el7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-150000.3.83.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.392-150200.3.39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.392-150200.3.39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.392-150200.3.39.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-30.117.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-30.117.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.15-30.117.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.402-150200.3.42.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.402-150200.3.42.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.21.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-17-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.9.0-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_8_0-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.392-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"java-11-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.26.0-bp156.4.3.1"}]}],"bundled":58},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-11-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.26.0-bp156.4.3.1"}]}],"bundled":58},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"java-17-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.14.0-bp156.3.3.1"}]}],"bundled":47},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-17-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.14.0-bp156.3.3.1"}]}],"bundled":47}],"products":[{"vendor":"eclipse","product":"openj9"},{"vendor":"eclipse foundation","product":"openj9"}],"references":[{"url":"https://github.com/eclipse-openj9/openj9/pull/18085","tags":["x_transferred","Issue Tracking","Patch","fix","article"]},{"url":"https://gitlab.eclipse.org/security/cve-assignement/-/issues/13","tags":["x_transferred","Vendor Advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5676","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002"},{"url":"https://github.com/advisories/GHSA-5ch2-qvr7-76ch"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5676.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0866","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2250255","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0866.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5676","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5676","tags":["advisory"]},{"url":"https://www.ibm.com/support/pages/apar/IJ49075","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22067","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22067","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22067","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22081","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22081","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0879","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0879.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234572-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204264","tags":["report"]},{"url":"https://bugzilla.suse.com/1216339","tags":["report"]},{"url":"https://bugzilla.suse.com/1216374","tags":["report"]},{"url":"https://bugzilla.suse.com/1216379","tags":["report"]},{"url":"https://bugzilla.suse.com/1216640","tags":["report"]},{"url":"https://bugzilla.suse.com/1217214","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5676","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234612-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234614-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240479-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1218903","tags":["report"]},{"url":"https://bugzilla.suse.com/1218905","tags":["report"]},{"url":"https://bugzilla.suse.com/1218906","tags":["report"]},{"url":"https://bugzilla.suse.com/1218907","tags":["report"]},{"url":"https://bugzilla.suse.com/1218909","tags":["report"]},{"url":"https://bugzilla.suse.com/1218911","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20952","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GS63GCBRVH7N4JEIZNQAPVFNNVB2OGSU/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181239","tags":["report"]},{"url":"https://bugzilla.suse.com/1185055","tags":["report"]},{"url":"https://bugzilla.suse.com/1185056","tags":["report"]},{"url":"https://bugzilla.suse.com/1188564","tags":["report"]},{"url":"https://bugzilla.suse.com/1188565","tags":["report"]},{"url":"https://bugzilla.suse.com/1188566","tags":["report"]},{"url":"https://bugzilla.suse.com/1191901","tags":["report"]},{"url":"https://bugzilla.suse.com/1191903","tags":["report"]},{"url":"https://bugzilla.suse.com/1191904","tags":["report"]},{"url":"https://bugzilla.suse.com/1191906","tags":["report"]},{"url":"https://bugzilla.suse.com/1191909","tags":["report"]},{"url":"https://bugzilla.suse.com/1191910","tags":["report"]},{"url":"https://bugzilla.suse.com/1191911","tags":["report"]},{"url":"https://bugzilla.suse.com/1191912","tags":["report"]},{"url":"https://bugzilla.suse.com/1191913","tags":["report"]},{"url":"https://bugzilla.suse.com/1191914","tags":["report"]},{"url":"https://bugzilla.suse.com/1194925","tags":["report"]},{"url":"https://bugzilla.suse.com/1194926","tags":["report"]},{"url":"https://bugzilla.suse.com/1194927","tags":["report"]},{"url":"https://bugzilla.suse.com/1194928","tags":["report"]},{"url":"https://bugzilla.suse.com/1194929","tags":["report"]},{"url":"https://bugzilla.suse.com/1194930","tags":["report"]},{"url":"https://bugzilla.suse.com/1194931","tags":["report"]},{"url":"https://bugzilla.suse.com/1194932","tags":["report"]},{"url":"https://bugzilla.suse.com/1194933","tags":["report"]},{"url":"https://bugzilla.suse.com/1194934","tags":["report"]},{"url":"https://bugzilla.suse.com/1194935","tags":["report"]},{"url":"https://bugzilla.suse.com/1194937","tags":["report"]},{"url":"https://bugzilla.suse.com/1194939","tags":["report"]},{"url":"https://bugzilla.suse.com/1194940","tags":["report"]},{"url":"https://bugzilla.suse.com/1194941","tags":["report"]},{"url":"https://bugzilla.suse.com/1198671","tags":["report"]},{"url":"https://bugzilla.suse.com/1198672","tags":["report"]},{"url":"https://bugzilla.suse.com/1198673","tags":["report"]},{"url":"https://bugzilla.suse.com/1198674","tags":["report"]},{"url":"https://bugzilla.suse.com/1198675","tags":["report"]},{"url":"https://bugzilla.suse.com/1198935","tags":["report"]},{"url":"https://bugzilla.suse.com/1201684","tags":["report"]},{"url":"https://bugzilla.suse.com/1201692","tags":["report"]},{"url":"https://bugzilla.suse.com/1201694","tags":["report"]},{"url":"https://bugzilla.suse.com/1204468","tags":["report"]},{"url":"https://bugzilla.suse.com/1204471","tags":["report"]},{"url":"https://bugzilla.suse.com/1204472","tags":["report"]},{"url":"https://bugzilla.suse.com/1204473","tags":["report"]},{"url":"https://bugzilla.suse.com/1204475","tags":["report"]},{"url":"https://bugzilla.suse.com/1204480","tags":["report"]},{"url":"https://bugzilla.suse.com/1204703","tags":["report"]},{"url":"https://bugzilla.suse.com/1206549","tags":["report"]},{"url":"https://bugzilla.suse.com/1207246","tags":["report"]},{"url":"https://bugzilla.suse.com/1207248","tags":["report"]},{"url":"https://bugzilla.suse.com/1207922","tags":["report"]},{"url":"https://bugzilla.suse.com/1210628","tags":["report"]},{"url":"https://bugzilla.suse.com/1210631","tags":["report"]},{"url":"https://bugzilla.suse.com/1210632","tags":["report"]},{"url":"https://bugzilla.suse.com/1210634","tags":["report"]},{"url":"https://bugzilla.suse.com/1210635","tags":["report"]},{"url":"https://bugzilla.suse.com/1210636","tags":["report"]},{"url":"https://bugzilla.suse.com/1210637","tags":["report"]},{"url":"https://bugzilla.suse.com/1211615","tags":["report"]},{"url":"https://bugzilla.suse.com/1213470","tags":["report"]},{"url":"https://bugzilla.suse.com/1213473","tags":["report"]},{"url":"https://bugzilla.suse.com/1213474","tags":["report"]},{"url":"https://bugzilla.suse.com/1213475","tags":["report"]},{"url":"https://bugzilla.suse.com/1213481","tags":["report"]},{"url":"https://bugzilla.suse.com/1213482","tags":["report"]},{"url":"https://bugzilla.suse.com/1222979","tags":["report"]},{"url":"https://bugzilla.suse.com/1222983","tags":["report"]},{"url":"https://bugzilla.suse.com/1222984","tags":["report"]},{"url":"https://bugzilla.suse.com/1222986","tags":["report"]},{"url":"https://bugzilla.suse.com/1222987","tags":["report"]},{"url":"https://bugzilla.suse.com/1225470","tags":["report"]},{"url":"https://bugzilla.suse.com/1228046","tags":["report"]},{"url":"https://bugzilla.suse.com/1228047","tags":["report"]},{"url":"https://bugzilla.suse.com/1228048","tags":["report"]},{"url":"https://bugzilla.suse.com/1228050","tags":["report"]},{"url":"https://bugzilla.suse.com/1228051","tags":["report"]},{"url":"https://bugzilla.suse.com/1228052","tags":["report"]},{"url":"https://bugzilla.suse.com/1231702","tags":["report"]},{"url":"https://bugzilla.suse.com/1231711","tags":["report"]},{"url":"https://bugzilla.suse.com/1231716","tags":["report"]},{"url":"https://bugzilla.suse.com/1231719","tags":["report"]},{"url":"https://bugzilla.suse.com/1236278","tags":["report"]},{"url":"https://bugzilla.suse.com/1236804","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21502","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XA5CCGSPUXUTQHDG25O5DM4G37BLRUMN/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213479","tags":["report"]},{"url":"https://bugzilla.suse.com/1218908","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20932","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-5676","title":"Eclipse OpenJ9 possible infinite busy hang","description":"In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.\n","status":"published","published":"2023-11-15T14:02:01.422Z","modified":"2025-11-03T21:50:38.622Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-364"],"updated_at":"2026-11-02T14:35:17.149492Z"}],"euvd":[{"id":"EUVD-2023-57967","description":"In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.\n","status":"published","published":"2023-11-15T14:02:01Z","modified":"2025-11-03T21:50:38Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:30.775561Z"}],"ghsa":[{"id":"GHSA-5ch2-qvr7-76ch","title":"In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a...","description":"In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.","status":"published","published":"2023-11-15T15:30:21Z","modified":"2025-11-04T00:30:42Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-362","CWE-364"],"updated_at":"2026-11-02T15:04:25.970519Z"}],"nvd":[{"id":"CVE-2023-5676","description":"In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.\n","status":"published","published":"2023-11-15T14:15:07.683Z","modified":"2026-06-17T06:49:03.413Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-364","CWE-362"],"updated_at":"2026-11-02T14:08:47.966245Z"}],"osv":[{"id":"CVE-2023-5676","title":"Eclipse OpenJ9 possible infinite busy hang","description":"In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.\n","status":"published","published":"2023-11-15T14:02:01.422Z","modified":"2026-10-28T02:30:59.673927497Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-364"],"updated_at":"2026-11-02T15:44:36.851042Z"},{"id":"RHSA-2024:0866","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T23:53:49Z","modified":"2026-10-09T10:09:08Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"RHSA-2024:0879","title":"Red Hat Security Advisory: java-1.8.0-ibm security update","status":"published","published":"2024-09-13T23:54:16Z","modified":"2026-10-09T10:09:08Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"openSUSE-SU-2024:13455-1","title":"java-11-openj9-11.0.21.0-1.1 on GA media","description":"These are all security issues fixed in the java-11-openj9-11.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:36:34.740502Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:13456-1","title":"java-17-openj9-17.0.9.0-1.1 on GA media","description":"These are all security issues fixed in the java-17-openj9-17.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:01:12.800312Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:13457-1","title":"java-1_8_0-openj9-1.8.0.392-1.1 on GA media","description":"These are all security issues fixed in the java-1_8_0-openj9-1.8.0.392-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:03:18.971117Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2025:0066-1","title":"Security update for java-11-openj9","description":"This update for java-11-openj9 fixes the following issues:\n\n- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine\n- Including Oracle October 2024 and January 2025 CPU changes\n  * CVE-2024-21208 (boo#1231702), CVE-2024-21210 (boo#1231711),\n    CVE-2024-21217 (boo#1231716), CVE-2024-21235 (boo#1231719),\n    CVE-2025-21502 (boo#1236278)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.49/\n\n- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine\n- Including Oracle July 2024 CPU changes\n  * CVE-2024-21131 (boo#1228046), CVE-2024-21138 (boo#1228047),\n    CVE-2024-21140 (boo#1228048), CVE-2024-21144 (boo#1228050),\n    CVE-2024-21147 (boo#1228052), CVE-2024-21145 (boo#1228051)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.46/\n\n- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine\n- Including Oracle April 2024 CPU changes\n  * CVE-2024-21012 (boo#1222987), CVE-2024-21094 (boo#1222986),\n    CVE-2024-21011 (boo#1222979), CVE-2024-21085 (boo#1222984),\n    CVE-2024-21068 (boo#1222983)\n- Including OpenJ9/OMR specific fix:\n  * CVE-2024-3933 (boo#1225470)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.44/\n\n- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine\n- Including Oracle January 2024 CPU changes\n  * CVE-2024-20918 (boo#1218907), CVE-2024-20919 (boo#1218903),\n    CVE-2024-20921 (boo#1218905), CVE-2024-20926 (boo#1218906),\n    CVE-2024-20945 (boo#1218909), CVE-2024-20952 (boo#1218911)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.43/\n- Remove the possibility to put back removes JavaEE modules, since\n  our Java stack does not need this hack any more\n\n- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine\n- Including Oracle October 2023 CPU changes\n  * CVE-2023-22081, boo#1216374\n- Including Openj9 0.41.0 fixes of CVE-2023-5676, boo#1217214\n  * For other OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.41   \n\n- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine\n  * JDK-8313765: Invalid CEN header (invalid zip64 extra data\n    field size)\n\n- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine\n- Including Oracle April 2023 CPU changes\n  * CVE-2023-22006 (boo#1213473), CVE-2023-22036 (boo#1213474),\n    CVE-2023-22041 (boo#1213475), CVE-2023-22045 (boo#1213481),\n    CVE-2023-22049 (boo#1213482), CVE-2023-25193 (boo#1207922)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.40\n\n- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine\n- Including Oracle April 2023 CPU changes\n  * CVE-2023-21930 (boo#1210628), CVE-2023-21937 (boo#1210631),\n    CVE-2023-21938 (boo#1210632), CVE-2023-21939 (boo#1210634),\n    CVE-2023-21954 (boo#1210635), CVE-2023-21967 (boo#1210636),\n    CVE-2023-21968 (boo#1210637)\n  * OpenJ9 specific vulnerability: CVE-2023-2597 (boo#1211615)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.38\n\n- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine\n  * Including Oracle January 2023 CPU changes\n    + CVE-2023-21835, boo#1207246\n    + CVE-2023-21843, boo#1207248\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.36\n\n- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine\n  * Including Oracle October 2022 CPU changes\n    CVE-2022-21618 (boo#1204468), CVE-2022-21619 (boo#1204473),\n    CVE-2022-21626 (boo#1204471), CVE-2022-21624 (boo#1204475),\n    CVE-2022-21628 (boo#1204472), CVE-2022-39399 (boo#1204480)\n  * Fixes OpenJ9 vulnerability boo#1204703, CVE-2022-3676\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.35\n\n- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine\n  * Including Oracle July 2022 CPU changes\n    CVE-2022-21540 (boo#1201694), CVE-2022-21541 (boo#1201692),\n    CVE-2022-34169 (boo#1201684)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.33\n\n- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine\n  * Fixes boo#1198935, CVE-2021-41041: unverified methods can be\n    invoked using MethodHandles\n  * Including Oracle April 2022 CPU fixes\n    CVE-2022-21426 (boo#1198672), CVE-2022-21434 (boo#1198674),\n    CVE-2022-21443 (boo#1198675), CVE-2022-21476 (boo#1198671),\n    CVE-2022-21496 (boo#1198673)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.32\n\n- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine\n  * including Oracle January 2022 CPU changes (boo#1194925,\n    boo#1194926, boo#1194927, boo#1194928, boo#1194929, boo#1194930,\n    boo#1194931, boo#1194932, boo#1194933, boo#1194934, boo#1194935,\n    boo#1194937, boo#1194939, boo#1194940, boo#1194941)\n  * OpenJ9 changes see\n    https://www.eclipse.org/openj9/docs/version0.30.1\n\n- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine\n  * including Oracle July 2021 and October 2021 CPU changes\n    (boo#1188564, boo#1188565, boo#1188566, boo#1191901,\n    boo#1191909, boo#1191910, boo#1191911, boo#1191912,\n    boo#1191913, boo#1191903, boo#1191904, boo#1191914,\n    boo#1191906)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.29\n\n- Update to OpenJDK 11.0.11 with OpenJ9 0.26.0 virtual machine\n  * including Oracle April 2021 CPU changes (boo#1185055 and\n    boo#1185056)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.26\n\n- Update to OpenJDK 11.0.10 with OpenJ9 0.24.0 virtual machine\n  * including Oracle January 2021 CPU changes (boo#1181239)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.24\n","status":"published","published":"2025-02-18T16:58:15Z","modified":"2026-02-04T04:38:47.065924Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:0067-1","title":"Security update for java-17-openj9","description":"This update for java-17-openj9 fixes the following issues:\n\n- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine\n- Including Oracle October 2024 and January 2025 CPU changes\n  * CVE-2024-21208 (boo#1231702), CVE-2024-21210 (boo#1231711),\n    CVE-2024-21217 (boo#1231716), CVE-2024-21235 (boo#1231719),\n    CVE-2025-21502 (boo#1236278)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.49/\n\n- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine\n- Including Oracle July 2024 CPU changes\n  * CVE-2024-21131 (boo#1228046), CVE-2024-21138 (boo#1228047),\n    CVE-2024-21140 (boo#1228048), CVE-2024-21147 (boo#1228052),\n    CVE-2024-21145 (boo#1228051)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.46/\n\n- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine\n- Including Oracle April 2024 CPU changes\n  * CVE-2024-21012 (boo#1222987), CVE-2024-21094 (boo#1222986),\n    CVE-2024-21011 (boo#1222979), CVE-2024-21068 (boo#1222983)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.44/\n\n- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine\n- Including Oracle January 2024 CPU changes\n  * CVE-2024-20918 (boo#1218907), CVE-2024-20919 (boo#1218903),\n    CVE-2024-20921 (boo#1218905), CVE-2024-20932 (boo#1218908),\n    CVE-2024-20945 (boo#1218909), CVE-2024-20952 (boo#1218911)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.43/\n\n- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine\n- Including Oracle October 2023 CPU changes\n  * CVE-2023-22081, boo#1216374\n  * CVE-2023-22025, boo#1216339\n- Including Openj9 0.41.0 fixes of CVE-2023-5676, boo#1217214\n  * For other OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.41   \n\n- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine\n  * JDK-8313765: Invalid CEN header (invalid zip64 extra data\n    field size)\n\n- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine\n- Including Oracle July 2023 CPU changes\n  * CVE-2023-22006 (boo#1213473), CVE-2023-22036 (boo#1213474),\n    CVE-2023-22041 (boo#1213475), CVE-2023-22044 (boo#1213479),\n    CVE-2023-22045 (boo#1213481), CVE-2023-22049 (boo#1213482),\n    CVE-2023-25193 (boo#1207922)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.40\n\n- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine\n- Including Oracle April 2023 CPU changes\n  * CVE-2023-21930 (boo#1210628), CVE-2023-21937 (boo#1210631),\n    CVE-2023-21938 (boo#1210632), CVE-2023-21939 (boo#1210634),\n    CVE-2023-21954 (boo#1210635), CVE-2023-21967 (boo#1210636),\n    CVE-2023-21968 (boo#1210637)\n  * OpenJ9 specific vulnerability: CVE-2023-2597 (boo#1211615)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.38\n\n- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine\n  * including Oracle January 2023 CPU changes\n    + CVE-2023-21835, boo#1207246\n    + CVE-2023-21843, boo#1207248\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.36\n\n- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine\n  * Including Oracle October 2022 CPU changes\n    CVE-2022-21618 (boo#1204468), CVE-2022-21619 (boo#1204473),\n    CVE-2022-21626 (boo#1204471), CVE-2022-21624 (boo#1204475),\n    CVE-2022-21628 (boo#1204472), CVE-2022-39399 (boo#1204480)\n  * Fixes OpenJ9 vulnerability boo#1204703, CVE-2022-3676\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.35\n","status":"published","published":"2025-02-19T22:53:13Z","modified":"2026-02-04T02:32:33.540336Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2023:4572-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\n- Update to Java 8.0 Service Refresh 8 Fix Pack 15:\n  * Oracle October 17 2023 CPU [bsc#1216640]\n\nSecurity fixes:\n\n- CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374)\n- CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379)\n- CVE-2023-22025: Fixed memory corruption issue on x86_64 with AVX-512 (bsc#1216339)\n- CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214)\n\nBug fixes:\n\n- IBM Java idlj compiler switch definition because IBM java idlj seems to confuse char and wchar for typedef types (bsc#1204264).\n","status":"published","published":"2023-11-27T08:26:53Z","modified":"2025-05-02T04:34:33.17851Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4612-1","title":"Security update for java-1_8_0-openj9","description":"This update for java-1_8_0-openj9 fixes the following issues:\n\nUpdate to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual machine\n\n- CVE-2023-22067: Fixed an IOR deserialization issue in CORBA (bsc#1216379).\n- CVE-2023-22081: Fixed a certificate path validation issue during client authentication (bsc#1216374).\n- CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214).\n","status":"published","published":"2023-11-29T13:50:48Z","modified":"2026-02-04T03:55:52.744947Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4614-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\n- Update to Java 8.0 Service Refresh 8 Fix Pack 15:\n  * Oracle October 17 2023 CPU [bsc#1216640]\n\nSecurity fixes:\n\n- CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374)\n- CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379)\n- CVE-2023-22025: Fixed memory corruption issue on x86_64 with AVX-512 (bsc#1216339)\n- CVE-2023-5676: Fixed receiving a signal before initialization may lead to an infinite loop or unexpected crash (bsc#1217214)\n\nBug fixes:\n\n- IBM Java idlj compiler switch definition because IBM java idlj seems to confuse char and wchar for typedef types (bsc#1204264).\n","status":"published","published":"2023-11-29T14:48:45Z","modified":"2026-02-04T03:24:46.096733Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2024:0479-1","title":"Security update for java-1_8_0-openj9","description":"This update for java-1_8_0-openj9 fixes the following issues:\n\nUpdate to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual machine\n\n* Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214\n* CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903),\n  CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906),\n  CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)\n","status":"published","published":"2024-02-15T08:11:03Z","modified":"2026-02-04T04:09:41.850776Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}