Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
98
security advisorymoderatesecurity updateRedHat RHSA-2022:7050-01 Moderate OpenJDK 8u352 Connection Limit Issue
The Red Hat build of OpenJDK 8 (java-1.8.0-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: OpenJDK 8u352 Security Update for Portable Linux Builds Advisory ID: RHSA-2022:7050-01 Product: OpenJDK Advisory URL: https://access.redhat.com/errata/RHSA-2022:7050 Issue date: 2022-10-20 CVE Names: CVE-2022-21619 CVE-2022-21624 CVE-2022-21626 CVE-2022-21628 ==================================================================== 1. Summary: The Red Hat build of OpenJDK 8 (java-1.8.0-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: The OpenJDK 8 packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. This release of the Red Hat build of OpenJDK 8 (8u352) for portable Linux serves as a replacement for Red Hat build of OpenJDK 8 (8u342) and includes security and bug fixes as well as enhancements. For further information, refer to the release notes linked to in the References section. Security Fix(es): * OpenJDK: improper handling of long NTLM client hostnames (Networking, 8286526) (CVE-2022-21619) * OpenJDK: excessive memory allocation in X.509 certificate parsing (Libraries, 8286533) (CVE-2022-21626) * OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624) * OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628) Formore details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: 4. Bugs fixed (https://bugzilla.redhat.com/): 2133745 - CVE-2022-21619 OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) 2133753 - CVE-2022-21626 OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) 2133765 - CVE-2022-21624 OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) 2133769 - CVE-2022-21628 OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) 5. References: https://access.redhat.com/security/cve/CVE-2022-21619 https://access.redhat.com/security/cve/CVE-2022-21624 https://access.redhat.com/security/cve/CVE-2022-21626 https://access.redhat.com/security/cve/CVE-2022-21628 https://access.redhat.com/security/updates/classification#moderate 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBY1FiNdzjgjWX9erEAQjh9A//Y+wmqFn+nyZNgxiY6x/234XPYSL0WSyD O2GSj68YQDlBtcn8jrPIJEFOpm7nfUGVpII57sFQP4skqM49Ift8rhaE+MIYTQ7k dgWlABYxVJU4ptU18QbKtCWEJxdij1gm/8or/Sg385zV3+VcGRT6iPxGbWPbq8V1 R4siduc8JBlUk2jCbJM/OmLtfL0eQTxwwSvvpqqqaOgRla7cDt2NI1zzJvy9cA2q fmgqHvhTe2o3CXtManguJBfo6mwuYHRj0z6c3iOefNY8Ia/80poDw2VPGwVb/DAP /zu9caL6lPe8H2UKDYcj4307Uuf0U0XalTnr0Vob+jvPcyaGWBQVyxKkXMXK5b9B sOk3bB5V0NNuajjk1CPijKSDNAM8N9U9CgzVtprUW2MNcAkcNpZbY1l5egWtRWvI HjudZIaa6WMFfCvEfpvaiaJOtB7BGWstVisjyKvUbh2D1iaAlneFPdK6I7KZkzbT NGXwbkLI844xANzhK3yAcn39/HYFZCu6yFDsLuhg6pFRYLqVxXIOOn5rIs45QPNL TaRYjxxN+8vDqhNh/AfHrs2+4p5Wr9165tpjG9OZDh65VQxzroX2OSz4At6bXCVP lNlF6HB0ofjkto8fNqnOlaJtN8yOvgaW1bibzHKTufvLY0JXcYjqWrDPU6IS9vkS exATD5jqOYo=/ngT -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 20, 2022
Red Hat
98
security advisorymoderatesecurity updateRed Hat: RHSA-2021-1446-01 Moderate: OpenJDK 11.0.11 Security Update
The Red Hat Build of OpenJDK 11 (java-11-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: OpenJDK 11.0.11 Security Update for Portable Linux Builds Advisory ID: RHSA-2021:1446-01 Product: OpenJDK Advisory URL: https://access.redhat.com/errata/RHSA-2021:1446 Issue date: 2021-04-28 Keywords: openjdk,linux Cross references: RHSA-2021:71666-01 CVE Names: CVE-2021-2163 ==================================================================== 1. Summary: The Red Hat Build of OpenJDK 11 (java-11-openjdk) is now available for portable Linux. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: The OpenJDK 11 packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. This release of the Red Hat build of OpenJDK 11 (11.0.11) for portable Linux serves as a replacement for the Red Hat build of OpenJDK 11 (11.0.10) and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section. Security Fix(es): * OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906) (CVE-2021-2163) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 3. Solution: Before applying this update, make sure all previously released errata relevant to yoursystem have been applied. For details on how to apply this update, refer to: d_using_openjdk_11_on_rhel/installing-openjdk11-on-rhel8#installing-jdk11-o n-rhel-using-archive 4. Bugs fixed (https://bugzilla.redhat.com/): 1951217 - CVE-2021-2163 OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906) 5. References: https://access.redhat.com/security/cve/CVE-2021-2163 https://access.redhat.com/security/updates/classification#moderate https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=core.service.openjdk&version=11.0.11.9 https://openjdk.org/groups/vulnerability/advisories/2021-04-20 6. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2021 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYIlW3dzjgjWX9erEAQhX+g/+OPn5r48LkxCPHu7NnCpWp1W3GR3boaCa KjIPQ3cbtFVqrgMs8xK33ObaWmb2lFMQFyPYZudnSlvpBYzo+c3iz5OxM2fyGjPd ZtgGCjfnZwticJa4wEY8GhgG3ruRFEokoeOdLbYWkMbk3ranQ1N48xDEE5gmfybO 9drBITOaTKljRDlYHIU/ePafDwe6ZLtgescdA6SGMeY0qgKuqpcODx/1ags+Vpvb E0sjPfAGU3amAsmQwUCq2tVV0Bq93E9WOLwN/e28ys+uZo30XCQnjPoV5NPzCwOr oQ78LlHL/uD4utklZlVRuGG6gQAS8vE8ykcPQsr0m4lJIFcBro9ONrY1ppuFb6lL fV5e4gVLlNkMtmPWmA0E4gqgBa5bULgWJdEtq3RauWPp/YgsZgaQBPHHwtZlSjWC 0NTrcQqahrdrAfc09YnUfpZwFLrl+ohPsUWFsBLPzTRpJNyxVPeEtVi9nxzHom8n 5tMrHStWiP5LFfS2f61eD6MbLAy58TdcWtA/aEYutZBgcRSk9xTCK+kmprM/DGoY Ks95FhbLw/LKGeyKDa1E9j+5c9b3mEHGBO3Mm24HB8KiLiMKKbghTotcjCeXvwzO ZO36yTWWntJ8xvRDtQ5HPDbWnHVD+3Aw23KglzFKaSfnPqvW8/0R5QVZg1nuLXvY jNEVI8Rx0Gk=tx/r -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Apr 28, 2021
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!