Red Hat Security Advisory

RHSA-2023:4161

OpenJDK 11.0.20 Security Update for Windows Builds

Released 2023-07-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Build of OpenJDK 11.0.20

Fixes 6 records

TI-2023-10653 CVE-2023-25193 · GHSA-v8ff-vmc3-wr4m

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2)…

MEDIUM 42

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01812 Published 2023-02-04 Partial fix CWE-770

TI-2023-08411 CVE-2023-22041 · GHSA-rgxf-494f-377c

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM…

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.0048 Published 2023-07-18 Partial fix

TI-2023-08419 CVE-2023-22049 · GHSA-vp7m-m4v3-gxc5

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM…

LOW 21

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01457 Published 2023-07-18 Partial fix

TI-2023-08415 CVE-2023-22045 · GHSA-p276-58r4-6c33

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01308 Published 2023-07-18 Partial fix

TI-2023-08406 CVE-2023-22036 · GHSA-mw33-48wm-m4r2

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01256 Published 2023-07-18 Partial fix

TI-2023-08377 CVE-2023-22006 · GHSA-c36p-x44h-8wcq

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM…

LOW 17

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.0094 Published 2023-07-18 Partial fix