Headline

RHSA-2023:0206: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2023-21830: OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021)
CVE-2023-21843: OpenJDK: soundbank URL remote loading (Sound, 8293742)

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #java #ibm #sap

概要

Moderate: java-1.8.0-openjdk security update

タイプ/重大度

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

トピック

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

説明

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830)
OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解決法

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of OpenJDK Java must be restarted for this update to take effect.

影響を受ける製品

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.4 x86_64
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.4 aarch64

修正

BZ - 2160475 - CVE-2023-21843 OpenJDK: soundbank URL remote loading (Sound, 8293742)
BZ - 2160490 - CVE-2023-21830 OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021)

参考資料

https://access.redhat.com/security/updates/classification/#moderate

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM

java-1.8.0-openjdk-1.8.0.362.b08-1.el8_4.src.rpm

SHA-256: 4dfcfa7f7aee65d0149b97d49336898d795b27e65a746f60eb56d1caed14e72e

x86_64

java-1.8.0-openjdk-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 8eefe9e31598573673e2db317eb5a05e6381508d42136a1ec5094a5fb78a1289

java-1.8.0-openjdk-accessibility-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 3130023438d8f59c8b6479dfacf050c00638d52bc5fb5fc1214cebcb695125c6

java-1.8.0-openjdk-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: e394397736da35662bc65bf8e97a668323dc90db4949864130dc59718efd0615

java-1.8.0-openjdk-debugsource-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 0a6db1a3e6274334d6f241c2b1d35e463cb89bab57cc42e2a777b93a642a067f

java-1.8.0-openjdk-demo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 68ec1c0bb63a086b8abeeb516435139daadc60aa7d38db34eee8d38beee4a566

java-1.8.0-openjdk-demo-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: d340f1ad3aeef1d6a97fe272da4d8274ce5700945311f42aa3082cb79b89e87c

java-1.8.0-openjdk-demo-fastdebug-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 70c2d3a780f0b695e977618ca23bcfbe53856140447a8ae4bacb3a49132f0493

java-1.8.0-openjdk-demo-slowdebug-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: a87bc8397f7706465f7d16472d8a19e4a159920b193a19299c135351d42b2937

java-1.8.0-openjdk-devel-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: e5c0423a91e50bd3ace0737089e1ae49d9b91f3c08a5dc331406d7c35d4b6ce0

java-1.8.0-openjdk-devel-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 6711b05acc9080a6c62ec89073efeb11f81e5eb42b81a1385812f1460913c165

java-1.8.0-openjdk-devel-fastdebug-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: b1f8323125e6e8255efab2a37ecac7bef3bd4cecdb0fd239c9af42323dfba21a

java-1.8.0-openjdk-devel-slowdebug-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 11b1f45453f2f1a6050bb271c34d12b9b2d4d93d1280647cf350be6dd826b80e

java-1.8.0-openjdk-fastdebug-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 6f130e5ef031450591ef4d3cf12d2daa399048fcd8adc46475cef336b91f725f

java-1.8.0-openjdk-headless-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 00d578a2b15f36b1d995241060cf4faa2fb15aad941e941cfc92012ac1b87866

java-1.8.0-openjdk-headless-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: afbc246e39cae0cb0102635dcaf673140e35407adfcdeeb4dc67baa45e470056

java-1.8.0-openjdk-headless-fastdebug-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 2054f0654fa4a542fae1aeb66477407c6b142750e05c1844a89ec142845af22b

java-1.8.0-openjdk-headless-slowdebug-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 3e735095f5091cdab5ce7d83f4fc124860496f6c6851e763680f25f0524248c4

java-1.8.0-openjdk-javadoc-1.8.0.362.b08-1.el8_4.noarch.rpm

SHA-256: b6a6228d7e61d02c8d77ec58c25ae847cdb8ced6f99b3f8f5263a736bb11bee4

java-1.8.0-openjdk-javadoc-zip-1.8.0.362.b08-1.el8_4.noarch.rpm

SHA-256: f4b1e145badc33e84b508a826f065ca82476513bb3c59dcefbab96df4b510986

java-1.8.0-openjdk-slowdebug-debuginfo-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 4fdd4d3fad766051d81f6179481d585f21318f250dd002dcd45bb3cceb9681b7

java-1.8.0-openjdk-src-1.8.0.362.b08-1.el8_4.x86_64.rpm

SHA-256: 44158ff06b1de7dd3e055b7b5bebd40a96c180f1bfe2dc44e2f517f5eab3eea2

Red Hat Enterprise Linux Server - AUS 8.4