Red Hat Security Advisory: java-1.8.0-ibm security update

Fixed packages 6

Vulnerabilities 7

• High 8.1
  CVE-2022-40609

  IBM SDK, Java Technology Edition code execution

  IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute a…

  IBM SDK, Java Technology Edition
  Aug 2, 2023
• High 7.4
  CVE-2023-21930

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Sup…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 18, 2023
• Medium 5.9
  CVE-2023-21967

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Sup…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 18, 2023
• Medium 5.3
  CVE-2023-21939 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Su…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 18, 2023
• Low 3.7
  CVE-2023-21937

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 18, 2023
• Low 3.7
  CVE-2023-21938

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 18, 2023
• Low 3.7
  CVE-2023-21968

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 18, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187435
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187704
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187724
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187758
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187790
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2187802
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4160.json
• report
  https://access.redhat.com/security/cve/CVE-2022-40609
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2228078
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-40609
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-40609
• article
  https://www.ibm.com/support/pages/node/7017032
• report
  https://access.redhat.com/security/cve/CVE-2023-21930
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-21930
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-21930
• report
  https://access.redhat.com/security/cve/CVE-2023-21937
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-21937
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-21937
• report
  https://access.redhat.com/security/cve/CVE-2023-21938
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-21938
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-21938
• report
  https://access.redhat.com/security/cve/CVE-2023-21939
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-21939
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-21939
• report
  https://access.redhat.com/security/cve/CVE-2023-21967
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-21967
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-21967
• report
  https://access.redhat.com/security/cve/CVE-2023-21968
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-21968
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-21968