Red Hat Security Advisory

RHSA-2023:1908

java-1.8.0-openjdk security update

Released 2023-04-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.372.b07-1.el8_7, java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.372.b07-1.el8_7, java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.372.b07-1.el8_7 +9
Red Hat Enterprise Linux AppStream (v. 8) java-1.8.0-openjdk-1:1.8.0.372.b07-1.el8_7, java-1.8.0-openjdk-accessibility-1:1.8.0.372.b07-1.el8_7, java-1.8.0-openjdk-demo-1:1.8.0.372.b07-1.el8_7 +5

TI-2023-08305 CVE-2023-21930 · GHSA-4j35-7cr4-3mc8

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01295 Published 2023-04-18 Partial fix

TI-2023-08339 CVE-2023-21967 · GHSA-wg7x-fvjp-r3fx

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01523 Published 2023-04-18 Partial fix

TI-2023-08328 CVE-2023-21954 · GHSA-8x3h-4f64-v6v6

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01421 Published 2023-04-18 Partial fix

TI-2023-08314 CVE-2023-21939 · GHSA-xfrf-5cgw-f964

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02474 Published 2023-04-18 Partial fix

TI-2023-08340 CVE-2023-21968 · GHSA-r6j2-4r52-mpg7

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01036 Published 2023-04-18 Partial fix CWE-284

TI-2023-08313 CVE-2023-21938 · GHSA-9pqg-44mx-r5gr

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01208 Published 2023-04-18 Partial fix

TI-2023-08312 CVE-2023-21937 · GHSA-vr26-5f5w-r829

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01208 Published 2023-04-18 Partial fix