Red Hat Security Advisory: java-1.8.0-ibm security update

Fixed packages 6

Vulnerabilities 3

• Medium 5.3
  CVE-2023-22067

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Su…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-9 Ubuntu Alpine Wolfi
  Oct 17, 2023
• Medium 5.3
  CVE-2023-22081

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 17, 2023
• Medium 4.1
  CVE-2023-5676

  Eclipse OpenJ9 possible infinite busy hang

  In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

  Eclipse Foundation OpenJ9
  Nov 15, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2243627
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2243637
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2250255
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0879.json
• report
  https://access.redhat.com/security/cve/CVE-2023-5676
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-5676
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-5676
• article
  https://github.com/eclipse-openj9/openj9/pull/18085
• article
  https://www.ibm.com/support/pages/apar/IJ49075
• report
  https://access.redhat.com/security/cve/CVE-2023-22067
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-22067
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-22067
• report
  https://access.redhat.com/security/cve/CVE-2023-22081
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-22081
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-22081