Fedora: Security Advisory for java-latest-openjdk (FEDORA-2023-43bce108c7)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for java-17-openjdk (FEDORA-2023-df5421d170)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 37 : java-11-openjdk (2023-d6bd6ec00b)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d6bd6ec00b advisory. New in release OpenJDK 11.0.18 2023-01-17 CVEs Fixed - CVE-2023-21835 - CVE-2023-21843 Security Fixes - JDK-8286070: Improve UTF8 representation -...

Fedora 36 : java-17-openjdk (2023-df5421d170)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-df5421d170 advisory. New in release OpenJDK 17.0.6 2023-01-17 CVEs Fixed - CVE-2023-21835 - CVE-2023-21843 Security Fixes - JDK-8286070: Improve UTF8 representation -...

Fedora 37 : java-latest-openjdk (2023-097f828f8c)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-097f828f8c advisory. New in release OpenJDK 19.0.2 2023-01-17 CVEs Fixed CVE-2023-21835 CVE-2023-21843 Security Fixes - JDK-8286070: Improve UTF8 representation -...

Fedora 36 : java-latest-openjdk (2023-43bce108c7)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-43bce108c7 advisory. New in release OpenJDK 19.0.2 2023-01-17 CVEs Fixed CVE-2023-21835 CVE-2023-21843 Security Fixes - JDK-8286070: Improve UTF8 representation -...

[SECURITY] [DSA 5335-1] openjdk-17 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5335-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 01, 2023 https://www.debian.org/security/faq -...

CentOS: Security Advisory for java-11-openjdk (CESA-2023:0195)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

java security update

CentOS Errata and Security Advisory CESA-2023:0195 An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

CentOS 7 : java-11-openjdk (RHSA-2023:0195)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0195 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affecte...

Fedora 37 : java-17-openjdk (2023-585aca2233)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-585aca2233 advisory. New in release OpenJDK 17.0.6 2023-01-17 CVEs Fixed - CVE-2023-21835 - CVE-2023-21843 Security Fixes - JDK-8286070: Improve UTF8 representation -...

[SECURITY] [DSA 5331-1] openjdk-11 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5331-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 28, 2023 https://www.debian.org/security/faq -...

K000132230: Java SE vulnerability CVE-2023-21835

Security Advisory Description Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily...

Amazon Linux 2022 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2022-2023-281)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2023-281 advisory. Enhance DTLS performance: DTLS does not avail itself of the HelloVerifyRequest message which opens opportunities for DoS. CVE-2023-21835 Better Banking of Sounds: JARSoundbankReader can load...

Amazon Linux 2022 : java-11-amazon-corretto, java-11-amazon-corretto-devel, java-11-amazon-corretto-headless (ALAS2022-2023-280)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2023-280 advisory. Enhance DTLS performance: DTLS does not avail itself of the HelloVerifyRequest message which opens opportunities for DoS. CVE-2023-21835 Better Banking of Sounds: JARSoundbankReader can load...

Scientific Linux Security Update : java-11-openjdk on SL7.x i686/x86_64 (2023:0195)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2023:0195-1 advisory. - OpenJDK: handshake DoS attack against DTLS connections JSSE, 8287411 CVE-2023-21835 - OpenJDK: soundbank URL remote loading Sound, 8293742...

OpenJDK 7 <= 7u361 / 8 <= 8u352 / 11.0.0 <= 11.0.17 / 13.0.0 <= 13.0.13 / 15.0.0 <= 15.0.9 / 17.0.0 <= 17.0.5 / 19.0.0 <= 19.0.1 Multiple Vulnerabilities (2023-01-17

The version of OpenJDK installed on the remote host is prior to 7 = 7u361 / 8 = 8u352 / 11.0.0 = 11.0.17 / 13.0.0 = 13.0.13 / 15.0.0 = 15.0.9 / 17.0.0 = 17.0.5 / 19.0.0 = 19.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-01-17 advisory. Please Note: Java CVE...

Oracle Linux 9 : java-17-openjdk (ELSA-2023-0194)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0194 advisory. 1:17.0.6.0.10-3.0.1 - Replace upstream references Orabug: 34340155 1:17.0.6.0.10-3 - Add missing release note for JDK-8295687 - Resolves: rhbz2160111...

Amazon Linux 2 : java-11-amazon-corretto (ALAS-2023-1918)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.18+10-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1918 advisory. Enhance DTLS performance: DTLS does not avail itself of the HelloVerifyRequest message which opens...

Oracle Linux 7 : java-11-openjdk (ELSA-2023-0195)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0195 advisory. 1:11.0.18.0.10-1 - Update to jdk-11.0.18+10 GA - Update release notes to 11.0.18+10 - Switch to GA mode for release - This tarball is embargoed until...