Red Hat Security Advisory

RHSA-2023:1880

java-11-openjdk security update

Released 2023-04-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) java-11-openjdk-demo-fastdebug-1:11.0.19.0.7-1.el9_1, java-11-openjdk-demo-slowdebug-1:11.0.19.0.7-1.el9_1, java-11-openjdk-devel-fastdebug-1:11.0.19.0.7-1.el9_1 +11
Red Hat Enterprise Linux AppStream (v. 9) java-11-openjdk-1:11.0.19.0.7-1.el9_1, java-11-openjdk-demo-1:11.0.19.0.7-1.el9_1, java-11-openjdk-devel-1:11.0.19.0.7-1.el9_1 +6

TI-2023-08305 CVE-2023-21930 · GHSA-4j35-7cr4-3mc8

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01295 Published 2023-04-18 Partial fix

TI-2023-08339 CVE-2023-21967 · GHSA-wg7x-fvjp-r3fx

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01523 Published 2023-04-18 Partial fix

TI-2023-08328 CVE-2023-21954 · GHSA-8x3h-4f64-v6v6

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01421 Published 2023-04-18 Partial fix

TI-2023-08314 CVE-2023-21939 · GHSA-xfrf-5cgw-f964

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02474 Published 2023-04-18 Partial fix

TI-2023-08340 CVE-2023-21968 · GHSA-r6j2-4r52-mpg7

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01036 Published 2023-04-18 Partial fix CWE-284

TI-2023-08313 CVE-2023-21938 · GHSA-9pqg-44mx-r5gr

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01208 Published 2023-04-18 Partial fix

TI-2023-08312 CVE-2023-21937 · GHSA-vr26-5f5w-r829

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01208 Published 2023-04-18 Partial fix