Summary
[1:1.8.0.392.b08-3.0.1]
- Update to shenandoah-jdk8u392-b08 (GA)
- OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
- OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
- OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)
- A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (RHEL-13593)
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | java-1.8.0-openjdk | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-demo | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-demo-fastdebug | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-demo-slowdebug | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-devel | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-devel-fastdebug | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-devel-slowdebug | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-fastdebug | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-headless | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-headless-fastdebug | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-headless-slowdebug | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-javadoc | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-javadoc-zip | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-slowdebug | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-src | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-src-fastdebug | 1:1.8.0.392.b08-3.0.1.el9 |
| Oracle Linux · 9 | java-1.8.0-openjdk-src-slowdebug | 1:1.8.0.392.b08-3.0.1.el9 |
Vulnerabilities 3
-
Medium 5.3
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Su…
-
Medium 5.3
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…
-
Unscored —CVE-2022-40433 Rejected
** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.