Oracle Java SE: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 8.1
  CVE-2022-43548 EPSS 15%

  A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insuffi…

  Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine
  Dec 5, 2022
• Medium 5.3
  CVE-2023-21830

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serializat…

  Oracle Java SE JDK and JRE openjdk-8 openjdk8 Debian Ubuntu Alpine Wolfi
  Jan 17, 2023
• Medium 5.3
  CVE-2023-21835

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Sup…

  Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi
  Jan 17, 2023
• Low 3.7
  CVE-2023-21843

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Su…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 17, 2023

Revision history

1. 2025-02-19 #38

   Neue Updates von openSUSE aufgenommen

2. 2025-02-18 #37

   Neue Updates von openSUSE aufgenommen

3. 2025-01-21 #36

   Neue Updates aufgenommen

4. 2024-12-17 #35

   Neue Updates von IBM aufgenommen

5. 2024-10-14 #34

   Neue Updates aufgenommen

6. 2024-09-29 #33

   Neue Updates von Gentoo aufgenommen

7. 2024-01-17 #32

   Neue Updates von Gentoo aufgenommen

8. 2023-10-24 #31

   Neue Updates von IBM aufgenommen

9. 2023-08-30 #30

   Neue Updates von IBM aufgenommen

10. 2023-07-23 #29

    Neue Updates von Dell aufgenommen

11. 2023-07-02 #28

    Neue Updates von IBM aufgenommen

12. 2023-05-31 #27

    Neue Updates von IBM aufgenommen

13. 2023-05-21 #26

    Neue Updates von IBM aufgenommen

14. 2023-05-04 #25

    Neue Updates von SUSE aufgenommen

15. 2023-05-02 #24

    Neue Updates von IBM aufgenommen

16. 2023-04-16 #23

    Neue Updates von SUSE aufgenommen

17. 2023-03-30 #22

    Neue Updates von IBM aufgenommen

18. 2023-03-15 #21

    Neue Updates von SUSE aufgenommen

19. 2023-03-14 #20

    Neue Updates von SUSE aufgenommen

20. 2023-03-13 #19

    Neue Updates von SUSE aufgenommen

21. 2023-03-07 #18

    Neue Updates von Amazon aufgenommen

22. 2023-03-01 #17

    Neue Updates von Red Hat aufgenommen

23. 2023-02-27 #16

    Neue Updates von Ubuntu aufgenommen

24. 2023-02-23 #15

    Neue Updates von Amazon aufgenommen

25. 2023-02-22 #14

    Neue Updates von Amazon aufgenommen

References

• Oracle Critical Patch Update Advisory - January 2023 - Appendix Oracle Java SE vom 2023-01-17
  https://www.oracle.com/security-alerts/cpujan2023.html#AppendixJAVA
• Change Log for Amazon Corretto 11
  https://github.com/corretto/corretto-11/blob/release-11.0.18.10.1/CHANGELOG.md
• Change Log for Amazon Corretto 8
  https://github.com/corretto/corretto-8/blob/release-8.362.08.1/CHANGELOG.md
• Red Hat Security Advisory RHSA-2023:0191 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0191
• Red Hat Security Advisory RHSA-2023:0192 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0192
• Red Hat Security Advisory RHSA-2023:0193 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0193
• Red Hat Security Advisory RHSA-2023:0196 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0196
• Red Hat Security Advisory RHSA-2023:0197 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0197
• Red Hat Security Advisory RHSA-2023:0198 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0198
• Red Hat Security Advisory RHSA-2023:0199 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0199
• Red Hat Security Advisory RHSA-2023:0200 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0200
• Red Hat Security Advisory RHSA-2023:0201 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0201
• Red Hat Security Advisory RHSA-2023:0190 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0190
• Red Hat Security Advisory RHSA-2023:0202 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2023:0202
• Oracle Linux Security Advisory ELSA-2023-0192 vom 2023-01-19
  http://linux.oracle.com/errata/ELSA-2023-0192.html
• Oracle Linux Security Advisory ELSA-2023-0200 vom 2023-01-19
  http://linux.oracle.com/errata/ELSA-2023-0200.html
• Oracle Linux Security Advisory ELSA-2023-0202 vom 2023-01-19
  http://linux.oracle.com/errata/ELSA-2023-0202.html
• Red Hat Security Advisory RHSA-2023:0195 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0195
• Oracle Linux Security Advisory ELSA-2023-0194 vom 2023-01-23
  https://linux.oracle.com/errata/ELSA-2023-0194.html
• Amazon Linux Security Advisory ALASCORRETTO8-2023-005 vom 2023-01-23
  https://alas.aws.amazon.com/AL2/ALASCORRETTO8-2023-005.html
• Amazon Linux Security Advisory ALAS-2023-1919 vom 2023-01-23
  https://alas.aws.amazon.com/AL2/ALAS-2023-1919.html
• Amazon Linux Security Advisory ALAS-2023-1918 vom 2023-01-23
  https://alas.aws.amazon.com/AL2/ALAS-2023-1918.html
• Red Hat Security Advisory RHSA-2023:0389 vom 2023-01-24
  https://access.redhat.com/errata/RHSA-2023:0389
• Red Hat Security Advisory RHSA-2023:0388 vom 2023-01-24
  https://access.redhat.com/errata/RHSA-2023:0388
• Red Hat Security Advisory RHSA-2023:0387 vom 2023-01-24
  https://access.redhat.com/errata/RHSA-2023:0387
• Red Hat Security Advisory RHSA-2023:0354 vom 2023-01-24
  https://access.redhat.com/errata/RHSA-2023:0354
• Red Hat Security Advisory RHSA-2023:0353 vom 2023-01-24
  https://access.redhat.com/errata/RHSA-2023:0353
• Red Hat Security Advisory RHSA-2023:0352 vom 2023-01-24
  https://access.redhat.com/errata/RHSA-2023:0352
• Red Hat Security Advisory RHSA-2023:0209 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0209
• Red Hat Security Advisory RHSA-2023:0207 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0207
• Red Hat Security Advisory RHSA-2023:0206 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0206
• Red Hat Security Advisory RHSA-2023:0205 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0205
• Red Hat Security Advisory RHSA-2023:0204 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0204
• Red Hat Security Advisory RHSA-2023:0194 vom 2023-01-23
  https://access.redhat.com/errata/RHSA-2023:0194
• Red Hat Security Advisory RHSA-2023:0203 vom 2023-01-24
  https://access.redhat.com/errata/RHSA-2023:0203
• Oracle Linux Security Advisory ELSA-2023-0203 vom 2023-01-24
  http://linux.oracle.com/errata/ELSA-2023-0203.html
• Oracle Linux Security Advisory ELSA-2023-0195 vom 2023-01-24
  http://linux.oracle.com/errata/ELSA-2023-0195.html
• Amazon Linux Security Advisory ALAS-2023-280 vom 2023-01-25
  https://alas.aws.amazon.com/AL2022/ALAS-2023-280.html
• Amazon Linux Security Advisory ALAS-2023-281 vom 2023-01-25
  https://alas.aws.amazon.com/AL2022/ALAS-2023-281.html
• Amazon Linux Security Advisory ALAS-2023-279 vom 2023-01-25
  https://alas.aws.amazon.com/AL2022/ALAS-2023-279.html
• Oracle Linux Security Advisory ELSA-2023-0208 vom 2023-01-27
  https://linux.oracle.com/errata/ELSA-2023-0208.html
• Red Hat Security Advisory RHSA-2023:0208 vom 2023-01-26
  https://access.redhat.com/errata/RHSA-2023:0208
• Red Hat Security Advisory RHSA-2023:0210 vom 2023-01-26
  https://access.redhat.com/errata/RHSA-2023:0210
• Oracle Linux Security Advisory ELSA-2023-0210 vom 2023-01-27
  http://linux.oracle.com/errata/ELSA-2023-0210.html
• Debian Security Advisory DSA-5331 vom 2023-01-29
  https://www.debian.org/security/2023/dsa-5331
• CentOS Security Advisory CESA-2023:0203 vom 2023-01-30
  https://lists.centos.org/pipermail/centos-announce/2023-January/086357.html
• CentOS Security Advisory CESA-2023:0195 vom 2023-01-30
  https://lists.centos.org/pipermail/centos-announce/2023-January/086356.html
• Debian Security Advisory DSA-5335 vom 2023-02-01
  https://lists.debian.org/debian-security-announce/2023/msg00024.html
• Hitachi Vulnerability Information HITACHI-SEC-2023-104 vom 2023-02-07
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-104/index.html
• NetApp Security Advisory NTAP-20230208-0001 vom 2023-02-08
  https://security.netapp.com/advisory/ntap-20230208-0001/
• SUSE Security Update SUSE-SU-2023:0437-1 vom 2023-02-16
  https://lists.suse.com/pipermail/sle-security-updates/2023-February/013805.html
• SUSE Security Update SUSE-SU-2023:0436-1 vom 2023-02-16
  https://lists.suse.com/pipermail/sle-security-updates/2023-February/013804.html
• SUSE Security Update SUSE-SU-2023:0435-1 vom 2023-02-16
  https://lists.suse.com/pipermail/sle-security-updates/2023-February/013803.html
• Amazon Linux Security Advisory ALAS-2023-1963 vom 2023-02-22
  https://alas.aws.amazon.com/AL2/ALAS-2023-1963.html
• Amazon Linux Security Advisory ALASJAVA-OPENJDK11-2023-003 vom 2023-02-23
  https://alas.aws.amazon.com/AL2/ALASJAVA-OPENJDK11-2023-003.html
• Ubuntu Security Notice USN-5898-1 vom 2023-02-28
  https://ubuntu.com/security/notices/USN-5898-1
• Ubuntu Security Notice USN-5897-1 vom 2023-02-28
  https://ubuntu.com/security/notices/USN-5897-1
• Red Hat Security Advisory RHSA-2023:1047 vom 2023-03-02
  https://access.redhat.com/errata/RHSA-2023:1047
• Amazon Linux Security Advisory ALAS-2023-1697 vom 2023-03-07
  https://alas.aws.amazon.com/ALAS-2023-1697.html
• SUSE Security Update SUSE-SU-2023:0685-1 vom 2023-03-13
  https://lists.suse.com/pipermail/sle-security-updates/2023-March/014024.html
• SUSE Security Update SUSE-SU-2023:0720-1 vom 2023-03-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-March/014035.html
• SUSE Security Update SUSE-SU-2023:0752-1 vom 2023-03-16
  https://lists.suse.com/pipermail/sle-security-updates/2023-March/014063.html
• IBM Security Bulletin 6967213 vom 2023-03-30
  https://www.ibm.com/support/pages/node/6967213
• SUSE Security Update SUSE-SU-2023:1850-1 vom 2023-04-14
  https://lists.suse.com/pipermail/sle-security-updates/2023-April/014464.html
• IBM Security Bulletin 6987835 vom 2023-05-02
  https://www.ibm.com/support/pages/node/6987835
• SUSE Security Update SUSE-SU-2023:1823-1 vom 2023-05-04
  https://lists.suse.com/pipermail/sle-security-updates/2023-May/014730.html
• IBM Security Bulletin 6995887 vom 2023-05-19
  https://aix.software.ibm.com/aix/efixes/security/java_may2023_advisory.asc
• IBM Security Bulletin 6999743 vom 2023-05-31
  https://www.ibm.com/support/pages/node/6999743
• IBM Security Bulletin 7007761 vom 2023-07-01
  https://www.ibm.com/support/pages/node/7007761
• Dell Security Advisory DSA-2023-085 vom 2023-07-21
  https://www.dell.com/support/kbdoc/de-de/000210968/dsa-2023-085-dell-networker-runtime-environment-nre-security-update-for-java-se-embedded-vulnerabilities
• IBM Security Bulletin 6983440 vom 2023-08-31
  https://www.ibm.com/support/pages/node/6983440
• IBM Security Bulletin 7058364 vom 2023-10-24
  https://www.ibm.com/support/pages/node/7058364
• Gentoo Linux Security Advisory GLSA-202401-25 vom 2024-01-17
  https://security.gentoo.org/glsa/202401-25
• Gentoo Linux Security Advisory GLSA-202409-26 vom 2024-09-28
  https://security.gentoo.org/glsa/202409-26
• ### vom 2024-10-15
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24999
• IBM Security Bulletin 7179223 vom 2024-12-17
  https://www.ibm.com/support/pages/node/7179223
• Change Log for Amazon Corretto 8 vom 2025-01-21
  https://github.com/corretto/corretto-8/blob/14eb6b297ac476ca5734706b40903e5a69ecd74a/CHANGELOG.md
• Change Log for Amazon Corretto 11 vom 2025-01-21
  https://github.com/corretto/corretto-11/blob/ece67a968d57210c69d3b9153576613846c1cacf/CHANGELOG.md
• openSUSE Security Update OPENSUSE-SU-2025:0066-1 vom 2025-02-18
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GS63GCBRVH7N4JEIZNQAPVFNNVB2OGSU/
• openSUSE Security Update OPENSUSE-SU-2025:0067-1 vom 2025-02-20
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XA5CCGSPUXUTQHDG25O5DM4G37BLRUMN/