Описание
ELSA-2023-5731: java-1.8.0-openjdk security update (MODERATE)
[1:1.8.0.392.b08-4.0.1]
- Update to shenandoah-jdk8u392-b08 (GA)
- OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
- OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
- OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)
- A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (RHEL-13593)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
java-1.8.0-openjdk
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-accessibility
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-accessibility-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-accessibility-slowdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-demo
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-demo-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-demo-slowdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-devel
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-devel-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-devel-slowdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-headless
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-headless-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-headless-slowdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-javadoc
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-javadoc-zip
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-slowdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-src
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-src-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-src-slowdebug
1.8.0.392.b08-4.0.1.el8
Oracle Linux x86_64
java-1.8.0-openjdk
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-accessibility
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-accessibility-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-accessibility-slowdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-demo
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-demo-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-demo-slowdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-devel
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-devel-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-devel-slowdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-headless
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-headless-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-headless-slowdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-javadoc
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-javadoc-zip
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-slowdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-src
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-src-fastdebug
1.8.0.392.b08-4.0.1.el8
java-1.8.0-openjdk-src-slowdebug
1.8.0.392.b08-4.0.1.el8
Связанные CVE
Связанные уязвимости
ELSA-2023-5733: java-1.8.0-openjdk security update (MODERATE)
A vulnerability was found in OpenJDK. This issue occurs in the ciMethodBlocks::make_block_at function in OpenJDK (HotSpot VM) 8 (11 and 17 are fixed starting from 11.0.17 and 17.0.5 respectively), and may allow an attacker to cause a denial of service.
Rejected reason: ** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.
ELSA-2023-5761: java-1.8.0-openjdk security update (MODERATE)
