Red Hat Security AdvisoryRHSA-2023:4157
java-11-openjdk security update
Released 2023-07-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.0) java-11-openjdk-demo-fastdebug-1:11.0.20.0.8-1.el9_0, java-11-openjdk-demo-slowdebug-1:11.0.20.0.8-1.el9_0, java-11-openjdk-devel-fastdebug-1:11.0.20.0.8-1.el9_0 +11
- Red Hat Enterprise Linux AppStream EUS (v.9.0) java-11-openjdk-1:11.0.20.0.8-1.el9_0, java-11-openjdk-demo-1:11.0.20.0.8-1.el9_0, java-11-openjdk-devel-1:11.0.20.0.8-1.el9_0 +6
Fixes 6 records
Priority MEDIUM 42
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01812 · Published 2023-02-04 · Partial fix CWE-770
Priority LOW 24
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.0048 · Published 2023-07-18 · Partial fix
Priority LOW 21
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01457 · Published 2023-07-18 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01308 · Published 2023-07-18 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01256 · Published 2023-07-18 · Partial fix
Priority LOW 17
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.0094 · Published 2023-07-18 · Partial fix
THREATIST.IORead the docs