Headline

RHSA-2023:0198: Red Hat Security Advisory: java-11-openjdk security update

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2023-21835: OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411)
CVE-2023-21843: OpenJDK: soundbank URL remote loading (Sound, 8293742)

1 year ago

Red Hat Security Data

Open in Source

#vulnerability #linux #red_hat #js #java #ibm #sap #ssl

Synopsis

Moderate: java-11-openjdk security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

All running instances of OpenJDK Java must be restarted for this update to take effect.

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.4 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.4 x86_64
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.4 aarch64

Fixes

BZ - 2160421 - CVE-2023-21835 OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411)
BZ - 2160475 - CVE-2023-21843 OpenJDK: soundbank URL remote loading (Sound, 8293742)

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM

java-11-openjdk-11.0.18.0.10-1.el8_4.src.rpm

SHA-256: 77d3157a47a8429d253348f4193c84cffdf231f6f19871e6e8924efb63bd87f7

x86_64

java-11-openjdk-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: c8e1f8c402622b309b2975d22ba3c386f62e86cff704218f313637374e03814c

java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: 106a910eb4e4c35dd494b7bb0371c4af1f486d9cd9ba671e9a5753c80f8a948a

java-11-openjdk-debugsource-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: f1d95dbe15ec8248e2056d38072da2c8783025492519741dadd1250e1c81fa20

java-11-openjdk-demo-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: 7a965a1f858115af11a27bd9bec0affc89c7d6a70ac60391e054a7810628981f

java-11-openjdk-devel-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: a9a5e2be2d8037d38a09be34bad443f6b6ac03a624d5954a25feb897cff18920

java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: f95636ed6dec3d4c11501b2cdebc2f01e635f1f376acf6e86b892e9019b575f2

java-11-openjdk-devel-fastdebug-debuginfo-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: dafba1302501bfcdaa757a1dab0c34d504997ac99e70718bb9e9a647bd29d73b

java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: 04917751ba03ffc91bb958992939543c77e160b4b473dea3934413befbd6998d

java-11-openjdk-fastdebug-debuginfo-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: 48cc7ccd0d91e80736e9fa40e6ba89caf5f137a6a538914c1a70c52bb311aee0

java-11-openjdk-headless-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: 6773ad83e4182eac590861017b45cb49acb147fc54051bfb3608eac230616c71

java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: c6e78f19c137aa6c4d0e13a812a42ca7480342bedddd0f7f385983a176f3df25

java-11-openjdk-headless-fastdebug-debuginfo-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: 961613e1a2ead48a3a9a5878c9a1a0a96900218c40fbc83ff4113aee083ab5bf

java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: 591d401cae4bbb0a564a572a9e86cac4c465c0cee2a14f5ae43bf414ce3cbd10

java-11-openjdk-javadoc-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: dfca1bbf8749a958a7bd2ef3444c736bed42aeb991d5064e107ed2bac0ffd8a8

java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: e69da63039dc060189a227a9d180d613f79cef89ebdb3e68ef1f9d1ddaf16700

java-11-openjdk-jmods-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: 2856710e8acea3882ef7f6a9d2ae77901d19e6c5ce74dfb37bd97d9ce49e93e0

java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: 461da604d6206264670a22b7c56773fadd326a51fa4bee08f91f37d77a4fd6e8

java-11-openjdk-src-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: f670c9563f1df88a45203fcc24cadb784b711a2920e104da63fdcdf4ae156ea5

java-11-openjdk-static-libs-11.0.18.0.10-1.el8_4.x86_64.rpm

SHA-256: 56bba904ba835c62605df7fc7f8c85c848270c11d5449b348a67657771b75822

Red Hat Enterprise Linux Server - AUS 8.4