Red Hat Security AdvisoryRHSA-2023:4163
java-11-openjdk security and bug fix update
Released 2023-07-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) java-11-openjdk-1:11.0.20.0.8-1.el8_4, java-11-openjdk-demo-1:11.0.20.0.8-1.el8_4, java-11-openjdk-devel-1:11.0.20.0.8-1.el8_4 +6
- Red Hat Enterprise Linux AppStream E4S (v.8.4) java-11-openjdk-1:11.0.20.0.8-1.el8_4, java-11-openjdk-demo-1:11.0.20.0.8-1.el8_4, java-11-openjdk-devel-1:11.0.20.0.8-1.el8_4 +6
- Red Hat Enterprise Linux AppStream TUS (v.8.4) java-11-openjdk-1:11.0.20.0.8-1.el8_4, java-11-openjdk-demo-1:11.0.20.0.8-1.el8_4, java-11-openjdk-devel-1:11.0.20.0.8-1.el8_4 +6
Fixes 6 records
Priority MEDIUM 42
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01812 · Published 2023-02-04 · Partial fix CWE-770
Priority LOW 24
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.0048 · Published 2023-07-18 · Partial fix
Priority LOW 21
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01457 · Published 2023-07-18 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01308 · Published 2023-07-18 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01256 · Published 2023-07-18 · Partial fix
Priority LOW 17
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.0094 · Published 2023-07-18 · Partial fix
THREATIST.IORead the docs