Lucene search

K
oraclelinuxOracleLinuxELSA-2023-4178
HistoryJul 26, 2023 - 12:00 a.m.

java-1.8.0-openjdk security and bug fix update

2023-07-2600:00:00
linux.oracle.com
10

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

20.2%

[1:1.8.0.382.b05-2.0.1]

  • Add Oracle vendor bug URL [Orabug: 34340155]
    [1:1.8.0.382.b05-2]
  • CVE-2023-22045 and CVE-2023-22049 fixed
  • Release bump for Oracle rebuild
    [1:1.8.0.382.b05-1]
  • Update to shenandoah-jdk8u372-b05 (GA)
  • Update release notes for shenandoah-8u372-b05.
  • This tarball is embargoed until 2023-07-18 @ 1pm PT.
  • Resolves: rhbz#2221106
    [1:1.8.0.382.b04-0.1.ea]
  • Update to shenandoah-jdk8u382-b04 (EA)
  • Update release notes for shenandoah-8u382-b04.
  • Related: rhbz#2221106
    [1:1.8.0.382.b01-0.1.ea]
  • Update to shenandoah-jdk8u382-b01 (EA)
  • Update release notes for shenandoah-8u382-b01.
  • Switch to EA mode.
  • Remove JDK-8271199 patch which is now upstream.
  • Related: rhbz#2221106

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

20.2%