Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-21830: Improve CORBA communication: CORBA deserialization can result in outbound network connections with data passed in.
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | java-1.8.0-openjdk | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-accessibility | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-accessibility-debug | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-debug | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-demo | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-devel | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-headless | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-javadoc | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-javadoc-zip | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-javadoc-zip-debug | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-src | 1:1.8.0.362.b08-1.amzn2.0.1 |
| Amazon Linux · 2 | java-1.8.0-openjdk-src-debug | 1:1.8.0.362.b08-1.amzn2.0.1 |
Vulnerabilities 1
-
Medium 5.3
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serializat…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-21830.html