Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Oracle Linux 8 ELSA-2023-2001 Important: Java 11 Vulnerability Fix

oracle
Calendar Grey April 20, 2023
Scroller Oracle
Oracle Linux 8 receives a Java update addressing essential security vulnerabilities, as detailed in the ELSA-2023-1895 security notice.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[1:11.0.19.0.7-1] - Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase FIPS support against 11.0.19+6 - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 [1:11.0.18.0.10-3] - Add missing release note for JDK-8295687 - Resolves: rhbz#2160111

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates//java-11-openjdk-11.0.19.0.7-1.el8_7.src.rpm

x86_64

java-11-openjdk-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-demo-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-devel-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-headless-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-javadoc-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-javadoc-zip-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-jmods-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-src-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-static-libs-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-demo-fastdebug-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-demo-slowdebug-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-devel-fastdebug-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-devel-slowdebug-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-fastdebug-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-headless-fastdebug-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-headless-slowdebug-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-openjdk-jmods-fastdebug-11.0.19.0.7-1.el8_7.x86_64.rpm java-11-op...

Read the Full Advisory

aarch64

java-11-openjdk-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-demo-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-devel-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-headless-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-javadoc-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-javadoc-zip-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-jmods-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-src-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-static-libs-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-demo-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-demo-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-devel-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-devel-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-headless-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-headless-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-jmods-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-jmods-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-src-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-src-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-static-libs-fastdebug-11.0.19.0.7-1.el8_7.aarch64.rpm java-11-openjdk-static-libs-slowdebug-11.0.19.0.7-1.el8_7.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2023-21930 CVE-2023-21937 CVE-2023-21938 CVE-2023-21939 CVE-2023-21954 CVE-2023-21967 CVE-2023-21968

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.