Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 23.04 USN-6272-1 Critical: OpenJDK 20 Security Flaws

ubuntu
Calendar Grey August 3, 2023
Dist Ubuntu Esm H88
Multiple significant vulnerabilities identified in OpenJDK 20 necessitate urgent measures to safeguard Ubuntu environments. Discover details about the updates.
Several security issues were fixed in OpenJDK 20.

Summary

Several security issues were fixed in OpenJDK 20.

Software Description:

- openjdk-20: Open Source Java implementation

Details:

Motoyasu Saburi discovered that OpenJDK 20 incorrectly handled special

characters in file name parameters. An attacker could possibly use

this issue to insert, edit or obtain sensitive information.

(CVE-2023-22006)

Eirik Bjørsnøs discovered that OpenJDK 20 incorrectly handled certain ZIP

archives. An attacker could possibly use this issue to cause a denial

of service. (CVE-2023-22036)

David Stancu discovered that OpenJDK 20 had a flaw in the AES cipher

implementation. An attacker could possibly use this issue to obtain

sensitive information. (CVE-2023-22041)

Zhiqiang Zang discovered that OpenJDK 20 incorrectly handled array accesses

when using the binary '%' operator. An attacker could possibly use this

issue to obtain sensitive information. (CVE-2023-22044)

Zhiqiang Zang discovered that OpenJDK 20 incorrectly handled array...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical issue Ubuntu sensitive information OpenJDK

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
  openjdk-20-jdk                  20.0.2+9+ds1-0ubuntu1~23.04
  openjdk-20-jre                  20.0.2+9+ds1-0ubuntu1~23.04
  openjdk-20-jre-headless         20.0.2+9+ds1-0ubuntu1~23.04
  openjdk-20-jre-zero             20.0.2+9+ds1-0ubuntu1~23.04

This update uses a new upstream release, which includes additional
bug fixes. After a standard system update you need to restart any
Java applications or applets to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6272-1

CVE-2023-22006, CVE-2023-22036, CVE-2023-22041, CVE-2023-22044,

CVE-2023-22045, CVE-2023-22049, CVE-2023-25193

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6272-1

Topics%20covered

Topics Covered

security advisory denial of service critical issue Ubuntu sensitive information OpenJDK

Package Information

https://launchpad.net/ubuntu/+source/openjdk-20/20.0.2+9+ds1-0ubuntu1~23.04

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here