{"type":"TYPE_SECURITY","shortCode":"RL","name":"RLSA-2023:1895","synopsis":"Important: java-11-openjdk security update","severity":"SEVERITY_IMPORTANT","topic":"An update is available for java-11-openjdk.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list","description":"The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)\n\n* OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)\n\n* OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)\n\n* OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)\n\n* OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)\n\n* OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)\n\n* OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","solution":null,"affectedProducts":["Rocky Linux 8"],"fixes":[{"ticket":"2187435","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2187435","description":""},{"ticket":"2187441","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2187441","description":""},{"ticket":"2187704","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2187704","description":""},{"ticket":"2187724","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2187724","description":""},{"ticket":"2187758","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2187758","description":""},{"ticket":"2187790","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2187790","description":""},{"ticket":"2187802","sourceBy":"Red Hat","sourceLink":"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=2187802","description":""}],"cves":[{"name":"CVE-2023-21930","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-21930","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2023-21937","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-21937","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2023-21938","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-21938","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2023-21939","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-21939","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2023-21954","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-21954","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2023-21967","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-21967","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"},{"name":"CVE-2023-21968","sourceBy":"MITRE","sourceLink":"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2023-21968","cvss3ScoringVector":"UNKNOWN","cvss3BaseScore":"UNKNOWN","cwe":"UNKNOWN"}],"references":[],"publishedAt":"2023-04-26T15:28:43.734178Z","rpms":{"Rocky Linux 8":{"nvras":["java-11-openjdk-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-1:11.0.19.0.7-1.el8_7.src.rpm","java-11-openjdk-debuginfo-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-debugsource-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-demo-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-demo-fastdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-demo-slowdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-devel-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-devel-debuginfo-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-devel-fastdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-devel-fastdebug-debuginfo-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-devel-slowdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-fastdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-fastdebug-debuginfo-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-headless-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-headless-debuginfo-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-headless-fastdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-headless-fastdebug-debuginfo-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-headless-slowdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-javadoc-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-javadoc-zip-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-jmods-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-jmods-fastdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-jmods-slowdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-slowdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-slowdebug-debuginfo-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-src-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-src-fastdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-src-slowdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-static-libs-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-static-libs-fastdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm","java-11-openjdk-static-libs-slowdebug-1:11.0.19.0.7-1.el8_7.aarch64.rpm"]}},"rebootSuggested":false,"buildReferences":[]}