Lucene search

K
redhatRedHatRHSA-2023:5734
HistoryOct 18, 2023 - 3:41 p.m.

(RHSA-2023:5734) Moderate: OpenJDK 11.0.21 Security Update for Portable Linux Builds

2023-10-1815:41:23
access.redhat.com
75
openjdk 11 packages
red hat build
security update
portable linux
certificate path validation
integer overflow
cve page

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

28.6%

The OpenJDK 11 packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

This release of the Red Hat build of OpenJDK 11 (11.0.21) for portable Linux serves as a replacement for the Red Hat build of OpenJDK 11 (11.0.20) and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.

Security Fix(es):

  • OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

  • freetype: integer overflowin in tt_hvadvance_adjust() in src/truetype/ttgxvar.c (CVE-2023-2004)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

28.6%