Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Oracle Linux 8 ELSA-2023-5751 Moderate: Java Memory Corruption

oracle
Calendar Grey October 31, 2023
Oracle Linux Logo Esm H88
The recent update for java-17-openjdk on Oracle Linux 8 tackles important concerns related to memory instability and problems with certificate validation.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[1:17.0.9.0.9-2.0.1] - Update to jdk-17.0.9+9 (GA) - Update release notes to 17.0.9+9 - OpenJDK: memory corruption issue on x86_64 with AVX-512 (JDK-8317121) (CVE-2023-22025) - OpenJDK: certificate path validation issue during client authentication (JDK-8309966) (CVE-2023-22081) - OpenJDK: Additional zip64 files validation (JDK-8313765) (RHBZ#2237170)

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates//java-17-openjdk-17.0.9.0.9-2.0.1.el8.src.rpm

x86_64

java-17-openjdk-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-demo-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-devel-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-headless-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-javadoc-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-javadoc-zip-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-jmods-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-src-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-static-libs-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-demo-fastdebug-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-demo-slowdebug-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-devel-fastdebug-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-devel-slowdebug-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-fastdebug-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-headless-fastdebug-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-headless-slowdebug-17.0.9.0.9-2.0.1.el8.x86_64.rpm java-17-openjdk-jmods-fastdebug-17.0.9.0.9-2.0.1.el8.x86_...

Read the Full Advisory

aarch64

java-17-openjdk-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-demo-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-devel-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-headless-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-javadoc-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-javadoc-zip-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-jmods-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-src-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-static-libs-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-demo-fastdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-demo-slowdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-devel-fastdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-devel-slowdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-fastdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-headless-fastdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-headless-slowdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-jmods-fastdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-jmods-slowdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-slowdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-src-fastdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-src-slowdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-static-libs-fastdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm java-17-openjdk-static-libs-slowdebug-17.0.9.0.9-2.0.1.el8.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2023-22025 CVE-2023-22081

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here