Skip to content
OpenAdvisories
Medium ALSA-2023:0200 2 CVEs

Moderate: java-11-openjdk security and bug fix update

Published Jan 18, 2023 · Updated Oct 29, 2026

Summary

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

* OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
* OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-8] (BZ#2157797)

Fixed packages 23

ReleasePackageFixed in
AlmaLinux · 8 java-11-openjdk 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-demo 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-demo-fastdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-demo-slowdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-devel 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-devel-fastdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-devel-slowdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-fastdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-headless 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-headless-fastdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-headless-slowdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-javadoc 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-javadoc-zip 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-jmods 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-jmods-fastdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-jmods-slowdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-slowdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-src 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-src-fastdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-src-slowdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-static-libs 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-static-libs-fastdebug 1:11.0.18.0.10-2.el8_7
AlmaLinux · 8 java-11-openjdk-static-libs-slowdebug 1:11.0.18.0.10-2.el8_7

Vulnerabilities 2

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-21835
  • report
    https://access.redhat.com/security/cve/CVE-2023-21843
  • report
    https://bugzilla.redhat.com/2160421
  • report
    https://bugzilla.redhat.com/2160475
  • advisory
    https://errata.almalinux.org/8/ALSA-2023-0200.html