Red Hat Security AdvisoryRHSA-2023:4233
java-11-openjdk security and bug fix update
Released 2023-07-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) java-11-openjdk-1:11.0.20.0.8-1.el7_9, java-11-openjdk-headless-1:11.0.20.0.8-1.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) java-11-openjdk-demo-1:11.0.20.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.20.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.20.0.8-1.el7_9 +4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-11-openjdk-demo-1:11.0.20.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.20.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.20.0.8-1.el7_9 +4
- Red Hat Enterprise Linux Server (v. 7) java-11-openjdk-1:11.0.20.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.20.0.8-1.el7_9, java-11-openjdk-headless-1:11.0.20.0.8-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) java-11-openjdk-demo-1:11.0.20.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.20.0.8-1.el7_9, java-11-openjdk-javadoc-zip-1:11.0.20.0.8-1.el7_9 +3
- Red Hat Enterprise Linux Workstation (v. 7) java-11-openjdk-1:11.0.20.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.20.0.8-1.el7_9, java-11-openjdk-headless-1:11.0.20.0.8-1.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) java-11-openjdk-demo-1:11.0.20.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.20.0.8-1.el7_9, java-11-openjdk-javadoc-zip-1:11.0.20.0.8-1.el7_9 +3
Fixes 6 records
Priority MEDIUM 42
hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01812 · Published 2023-02-04 · Partial fix CWE-770
Priority LOW 24
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.0048 · Published 2023-07-18 · Partial fix
Priority LOW 21
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01457 · Published 2023-07-18 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01308 · Published 2023-07-18 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01256 · Published 2023-07-18 · Partial fix
Priority LOW 17
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking).
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.0094 · Published 2023-07-18 · Partial fix
THREATIST.IORead the docs