Fedora 37 : java-17-openjdk-portable (2023-d1d4839202)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-d1d4839202 advisory. Update to jdk-17.0.8.0+7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

Fedora: Security Advisory for java-17-openjdk (FEDORA-2023-8a99b8d7fb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: java-17-openjdk-17.0.8.0.7-1.fc38

The OpenJDK 17 runtime environment...

Fedora 38 : java-17-openjdk (2023-8a99b8d7fb)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-8a99b8d7fb advisory. updated to security 17.0.8.0.7 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2023-36923 Code Injection vulnerability in SAP PowerDesigner

SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library, that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2023-22314

creationtimestamp| type| source ---|---|--- 2023-08-03 16:40:17+00:00| seen| https://t.me/cibsecurity/67675...

CVE-2023-3669

creationtimestamp| type| source ---|---|--- 2023-08-03 16:40:16+00:00| seen| https://t.me/cibsecurity/67674 2025-02-27 21:25:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5794 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2023-3663

creationtimestamp| type| source ---|---|--- 2023-08-03 14:39:54+00:00| seen| https://t.me/cibsecurity/67654 2025-02-27 21:25:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5792 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2023-4016

creationtimestamp| type| source ---|---|--- 2023-08-02 12:39:06+00:00| seen| https://t.me/cibsecurity/67567 2023-11-17 10:13:22+00:00| seen| https://t.me/arpsyndicate/254 2023-12-10 01:21:42+00:00| seen| https://t.me/arpsyndicate/1592...

Ubuntu: Security Advisory (USN-6263-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

This Week in Spring - August 1st, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! Can you believe it's already August 1, 2023??? Me either. As I write this, I'm preparing some of my contributions for SpringOne at VMWare Explore 2023, happening next month in lovely Las Vegas, NV. Have you registered yet? I'...

java-17-openjdk security and bug fix update

1:17.0.8.0.7-2.0.1 - OpenJDK: ZIP file parsing infinite loop 8302483 CVE-2023-22036 - OpenJDK: weakness in AES implementation 8308682 CVE-2023-22041 - OpenJDK: improper handling of slash characters in URI-to-path conversion 8305312 CVE-2023-22049 - harfbuzz: OpenJDK: On^2 growth via consecutive...

Debian: Security Advisory (DSA-5458-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : java-17-openjdk (ELSA-2023-4159)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4159 advisory. - OpenJDK: ZIP file parsing infinite loop 8302483 CVE-2023-22036 - OpenJDK: weakness in AES implementation 8308682 CVE-2023-22041 - OpenJDK: improper...

[SECURITY] [DSA 5458-1] openjdk-17 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5458-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 25, 2023 https://www.debian.org/security/faq -...

Moderate: Red Hat Security Advisory: OpenJDK 17.0.8 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Moderate: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixes: OpenJDK: ZIP file parsing infinite loop 8302483 CVE-2023-22036 OpenJDK: weakness in AES implementation 8308682 CVE-2023-22041 OpenJDK: improper handling o...

ALSA-2023:4177 Moderate: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixes: OpenJDK: ZIP file parsing infinite loop 8302483 CVE-2023-22036 OpenJDK: weakness in AES implementation 8308682 CVE-2023-22041 OpenJDK: improper handling o...

RHEL 8 : java-17-openjdk (RHSA-2023:4171)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4171 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixe...

Amazon Linux 2 : java-17-amazon-corretto (ALAS-2023-2138)

The version of java-17-amazon-corretto installed on the remote host is prior to 17.0.8+7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2138 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product ...