Skip to content
OpenAdvisories
Medium ALAS2023-2023-258 8 CVEs

Moderate: java-17-amazon-corretto security update (Amazon Linux 2023)

Published Jul 17, 2023 · Updated Jul 20, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-25193: hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks. CVE-2023-22049: Placeholder CVE. Details forthcoming CVE-2023-22045: Placeholder CVE. Details forthcoming CVE-2023-22044: Placeholder CVE. Details forthcoming CVE-2023-22043: Placeholder CVE. Details forthcoming CVE-2023-22041: Placeholder CVE. Details forthcoming CVE-2023-22036: Placeholder CVE. Details forthcoming CVE-2023-22006: Placeholder CVE. Details forthcoming

Fixed packages 5

ReleasePackageFixed in
Amazon Linux · 2023 java-17-amazon-corretto 1:17.0.8+7-1.amzn2023.1
Amazon Linux · 2023 java-17-amazon-corretto-devel 1:17.0.8+7-1.amzn2023.1
Amazon Linux · 2023 java-17-amazon-corretto-headless 1:17.0.8+7-1.amzn2023.1
Amazon Linux · 2023 java-17-amazon-corretto-javadoc 1:17.0.8+7-1.amzn2023.1
Amazon Linux · 2023 java-17-amazon-corretto-jmods 1:17.0.8+7-1.amzn2023.1

Vulnerabilities 8

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-22006.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-22036.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-22041.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-22043.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-22044.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-22045.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-22049.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-25193.html