Debian/openjdk-17: high 7.5
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC
Action: Upgrade openjdk-17 to 17.0.4+8-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 17.0.4+8-1 | - |
Fixed versions
| 17.0.4+8-1 |
Sources
- osv: DEBIAN-CVE-2022-34169#Debian:12/openjdk-17
- https://security-tracker.debian.org/tracker/CVE-2022-34169
published · modified · JSON