Red Hat Security Advisory

RHSA-2023:1875

java-11-openjdk security update

Released 2023-04-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-11-openjdk-1:11.0.19.0.7-1.el7_9, java-11-openjdk-headless-1:11.0.19.0.7-1.el7_9
Red Hat Enterprise Linux Client Optional (v. 7) java-11-openjdk-demo-1:11.0.19.0.7-1.el7_9, java-11-openjdk-devel-1:11.0.19.0.7-1.el7_9, java-11-openjdk-javadoc-1:11.0.19.0.7-1.el7_9 +4
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-11-openjdk-demo-1:11.0.19.0.7-1.el7_9, java-11-openjdk-devel-1:11.0.19.0.7-1.el7_9, java-11-openjdk-javadoc-1:11.0.19.0.7-1.el7_9 +4
Red Hat Enterprise Linux Server (v. 7) java-11-openjdk-1:11.0.19.0.7-1.el7_9, java-11-openjdk-devel-1:11.0.19.0.7-1.el7_9, java-11-openjdk-headless-1:11.0.19.0.7-1.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) java-11-openjdk-demo-1:11.0.19.0.7-1.el7_9, java-11-openjdk-javadoc-1:11.0.19.0.7-1.el7_9, java-11-openjdk-javadoc-zip-1:11.0.19.0.7-1.el7_9 +3
Red Hat Enterprise Linux Workstation (v. 7) java-11-openjdk-1:11.0.19.0.7-1.el7_9, java-11-openjdk-devel-1:11.0.19.0.7-1.el7_9, java-11-openjdk-headless-1:11.0.19.0.7-1.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) java-11-openjdk-demo-1:11.0.19.0.7-1.el7_9, java-11-openjdk-javadoc-1:11.0.19.0.7-1.el7_9, java-11-openjdk-javadoc-zip-1:11.0.19.0.7-1.el7_9 +3

TI-2023-08305 CVE-2023-21930 · GHSA-4j35-7cr4-3mc8

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01295 Published 2023-04-18 Partial fix

TI-2023-08339 CVE-2023-21967 · GHSA-wg7x-fvjp-r3fx

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01523 Published 2023-04-18 Partial fix

TI-2023-08328 CVE-2023-21954 · GHSA-8x3h-4f64-v6v6

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01421 Published 2023-04-18 Partial fix

TI-2023-08314 CVE-2023-21939 · GHSA-xfrf-5cgw-f964

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02474 Published 2023-04-18 Partial fix

TI-2023-08340 CVE-2023-21968 · GHSA-r6j2-4r52-mpg7

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01036 Published 2023-04-18 Partial fix CWE-284

TI-2023-08313 CVE-2023-21938 · GHSA-9pqg-44mx-r5gr

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01208 Published 2023-04-18 Partial fix

TI-2023-08312 CVE-2023-21937 · GHSA-vr26-5f5w-r829

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01208 Published 2023-04-18 Partial fix