[ALSA-2023:4175] Moderate: java-11-openjdk security and bug fix update
Type:
security
Severity:
moderate
Release date:
2023-07-21
Description:
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) * harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193) * OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006) * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * A virtual machine crash was observed in JDK 11.0.19 when executing the GregorianCalender.computeTime() method (JDK-8307683). It was found that although the root cause of the crash is an old issue, a recent fix for a rare issue in the C2 compiler (JDK-8297951) made the crash much more likely. To mitigate this, the fix has been reverted in JDK 11.0.20 and will be reapplied once JDK-8307683 is resolved. (RHBZ#2222493) * Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-8] (BZ#2223101)
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm 0683089fe31da591fa6764011f5e8973a451f942f44b8cb35e2dc3d784a9c31d
aarch64 java-11-openjdk-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm 102617ad7dbf7b8fe805b88b40b8ef9b7db8431161d78b32cba4e51bfded93c7
aarch64 java-11-openjdk-devel-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm 26faa3d69b03035b9fde3eb60a6eff5ea6c5a2c4389f843159f0bc02cc7f1191
aarch64 java-11-openjdk-headless-11.0.20.0.8-2.el8.aarch64.rpm 33ee124b4b115a218dfb2a19e407663e14bc0cbee4800ca021b8a75a3d1a8b99
aarch64 java-11-openjdk-demo-11.0.20.0.8-2.el8.aarch64.rpm 34830eca16d6c4a7b03740ca10e67e2f7dea458738cfbdf22d1770295545997e
aarch64 java-11-openjdk-11.0.20.0.8-2.el8.aarch64.rpm 375a4d032e4719d8b3d988f99416043d542bb6858fabd7cff73c5a3f82791e5b
aarch64 java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm 38d44361174d9696ce8a34c6a30c0b611285935aa08f18315946c50063249390
aarch64 java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm 39b25dea9144e738bb58c48724ed800680fe93bb21789f7a4451e0cf6c254949
aarch64 java-11-openjdk-static-libs-11.0.20.0.8-2.el8.aarch64.rpm 42d6ebaa2b5945282428ff888de75120928715a0a59457464f55580a4000f111
aarch64 java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm 48c8efa26716dabc488dfa6ca74b0a62107255ceaa7ebcf4e723659eba6c37af
aarch64 java-11-openjdk-static-libs-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm 548e80882291381656ea44cbedb9a99061a12a669a2d9971746a478057bdecaa
aarch64 java-11-openjdk-jmods-11.0.20.0.8-2.el8.aarch64.rpm 7c3b774a31e8271684e47aeb4b6cb332b2320f337f41f120e596e256ac38986f
aarch64 java-11-openjdk-javadoc-11.0.20.0.8-2.el8.aarch64.rpm 89717bb562cc8a52fc16ca1b6a1f821eb748b6495748e0755f0f493a295a34f6
aarch64 java-11-openjdk-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm 8d27e9aa38b01823d2df44b02308883e1d26b184e113255df7871a25e4c1a343
aarch64 java-11-openjdk-demo-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm 8dc8b58f9008676d579b0ea895d6d62a5df58cc2f275619a0d1113d5281b27b7
aarch64 java-11-openjdk-src-11.0.20.0.8-2.el8.aarch64.rpm 9a69208f3f15a06f1fa09b52f2f3dbc87739fed7c3a3139b4477dacf854a8e94
aarch64 java-11-openjdk-devel-11.0.20.0.8-2.el8.aarch64.rpm a44c2244b084091a67398187c1fa878481524d3486fb4d6b211f9f8a48b23ec2
aarch64 java-11-openjdk-headless-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm b25bbaf0c449ec410f7e522dcf0995858f156e304439e36c26e9af65d8f124a3
aarch64 java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm b807b86fe487bff5e498949a3e626ad23b6fda07158f2ab6d38495285785997e
aarch64 java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el8.aarch64.rpm b8705db333fe97de7d62c363b6328906327484e89ea89525306509cf638a63b6
aarch64 java-11-openjdk-src-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm c05e845d3958b05deb19fd612114269e327b66b515ea37bbaea23ed664ae3100
aarch64 java-11-openjdk-jmods-fastdebug-11.0.20.0.8-2.el8.aarch64.rpm ef743463729fc28f9e7ba70c1ba3909f214a7aeb90aa7ecb9aeaf9793cfee101
aarch64 java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el8.aarch64.rpm f009d186389b7da5b4e5ef01f18433539ea2920cb74a80cd007344e301546a90
ppc64le java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el8.ppc64le.rpm 0f39fda3b24a8f6ce5590eb370fb809ce40750dcaf6511d9dc5f30ada2880169
ppc64le java-11-openjdk-static-libs-fastdebug-11.0.20.0.8-2.el8.ppc64le.rpm 1894b81bb14c92279de7aeba6996669a367e105755318f45aeaac3ec6b1f9e09
ppc64le java-11-openjdk-static-libs-11.0.20.0.8-2.el8.ppc64le.rpm 1fe01e3dd1ae5f033834873367b24287973de0f89657f8de2d04920442d9abbe
ppc64le java-11-openjdk-demo-11.0.20.0.8-2.el8.ppc64le.rpm 2e2935e403ffa3e488b1265ded5f7cd9acd798ac19b78ca13e78ddfab1422260
ppc64le java-11-openjdk-jmods-11.0.20.0.8-2.el8.ppc64le.rpm 31b635867348a7987a9164a85b19330b8f24276f6b532458f6dbc7f7be53a85f
ppc64le java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el8.ppc64le.rpm 3a70b7a73312c8abe96341dba19c959abb7503fa4d830e5814bf446a144c09bc
ppc64le java-11-openjdk-devel-fastdebug-11.0.20.0.8-2.el8.ppc64le.rpm 3d9460124da53f8eb861da493087f3847a86c1facdaa35c08ba8ab268294a77f
ppc64le java-11-openjdk-headless-11.0.20.0.8-2.el8.ppc64le.rpm 3e923c9ac1e3d838f739de8c1863259e9f6ff3a3d5907e88289186cfd0b3d384
ppc64le java-11-openjdk-javadoc-11.0.20.0.8-2.el8.ppc64le.rpm 578f0cfff4b136f25af413f576138a8eb223a4e5f8e11202c96920d577458245
ppc64le java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el8.ppc64le.rpm 5b88c57e35484d067afdf72227e771473fda3decc7a23ee1725292ad64de5d6a
ppc64le java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el8.ppc64le.rpm 5ce304ec024dfbb64d2644a7f03daa71cc4641621a9ef5b7cfd386a71c71e92f
ppc64le java-11-openjdk-demo-fastdebug-11.0.20.0.8-2.el8.ppc64le.rpm 8575ed985d19143877badbe33127450a9def2789a70a0398caa0e91165658461
ppc64le java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el8.ppc64le.rpm 8d25d29d38eb33d0be526b31fbdbb638a44bc32659a0fe47523ff4b484058be8
ppc64le java-11-openjdk-11.0.20.0.8-2.el8.ppc64le.rpm 96e43027298d5c9f3f210171b389247bbf93ea29d9db9a37652ccefad9664eef
ppc64le java-11-openjdk-src-fastdebug-11.0.20.0.8-2.el8.ppc64le.rpm 99650f15419c269321bbe4f51886c369081858bf9798797020894ad1121820bb
ppc64le java-11-openjdk-fastdebug-11.0.20.0.8-2.el8.ppc64le.rpm a94a929b26341d2629a3449ca72a3b34aa0757cdca73bb67729f95e96fc3e8b6
ppc64le java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el8.ppc64le.rpm bd1b2cd7db7b7ae2a62018c98b586ce588de39c55f4258947211e9cc7a08b155
ppc64le java-11-openjdk-headless-fastdebug-11.0.20.0.8-2.el8.ppc64le.rpm cf59ebaba4cc1668197086cb6ad19e0631ad049cc485f1fa9bb73acdc697b7d6
ppc64le java-11-openjdk-devel-11.0.20.0.8-2.el8.ppc64le.rpm d33767b1a122ca489ac3d543f1e71878b5cd2ddab281cc540f62b75d059a6c6d
ppc64le java-11-openjdk-slowdebug-11.0.20.0.8-2.el8.ppc64le.rpm dab19fd27e51af3a91006c60c867429831d829b752facadcd14235f978614d12
ppc64le java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el8.ppc64le.rpm f4d5e853d7e693800de4c464c921fd53ed4f146e20c24856019aa866741dd64c
ppc64le java-11-openjdk-src-11.0.20.0.8-2.el8.ppc64le.rpm f6bb4338620195cd39de863008d1754b6627e4c36954414204893c0a3a8f8405
ppc64le java-11-openjdk-jmods-fastdebug-11.0.20.0.8-2.el8.ppc64le.rpm f9da3dfd23e0a90e2da8435ac6c3cedb519078e21a2466a3f48d44833bc1bdbc
s390x java-11-openjdk-javadoc-11.0.20.0.8-2.el8.s390x.rpm 0068a8cb5c238afd3d582f2d0168eedfc9467a58b0c0823e1206707debbe2ac6
s390x java-11-openjdk-src-11.0.20.0.8-2.el8.s390x.rpm 0205b2b0363e7b66993cb1106c20f381b12929ea3ad3353a31996d4fc4f0d5c6
s390x java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el8.s390x.rpm 18145440bb521a03141ada15b204a3bd6fcbc097ee0237d5c23f3de53f7ffa3a
s390x java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el8.s390x.rpm 310f36530b48fe8cccce676546bd3cb6fc94a920b3e4b34e8b6bb6d94093d922
s390x java-11-openjdk-11.0.20.0.8-2.el8.s390x.rpm 33e354c803f3ce33631dcf384fee5047377142c858a3c1223f8112e42dc31292
s390x java-11-openjdk-jmods-11.0.20.0.8-2.el8.s390x.rpm 3c0e06b3f1f2c62d9ed3fd309920d035862c846e4a572099465352580f8d9fb7
s390x java-11-openjdk-headless-11.0.20.0.8-2.el8.s390x.rpm 3f00ed792464bcb5a2aba6fac66c31ef2e6911662af7fc9db1552df9203203af
s390x java-11-openjdk-demo-11.0.20.0.8-2.el8.s390x.rpm 40f32bed29624d6658ffd0a9cd503ce78fe80c8254e62911ebd8284a4faf19ae
s390x java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el8.s390x.rpm 4b814e7936d40fcba874c0bf084852c332a3d43ea3f133eca4556147553d04bd
s390x java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el8.s390x.rpm 6c4aff2433f507f32ed76df59aedf1796712d48042f31e0e8a279dc89ac0034f
s390x java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el8.s390x.rpm 838319dca3b0d777a041a50c5a1f9b8f2e0e1fd5aa8678f2c03df924290d4f56
s390x java-11-openjdk-static-libs-11.0.20.0.8-2.el8.s390x.rpm 9b71e67e4c72f183718f4b8153013e1bb363530bef5d6f232751f823a64dc94b
s390x java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el8.s390x.rpm a5f68bb0f04bb75cbaebfc69c03882b011d60e9a8f82dfda263ae0dd754aef26
s390x java-11-openjdk-slowdebug-11.0.20.0.8-2.el8.s390x.rpm b2ba919463c63e0d26427dc33bbfa73b5ac885bf98106a863e2567b613612517
s390x java-11-openjdk-devel-11.0.20.0.8-2.el8.s390x.rpm c5b19f3a2f25aafc03f1517fd7f974ea266d0ba54a82379587366d2af41b00f5
s390x java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el8.s390x.rpm c96650f25b90b5c39d05352b509998e67dd6777756ce74aa324508cd2c15400b
x86_64 java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el8.x86_64.rpm 00743a2d99666fca5a8bc1645dc61be6c451add29d1db0f54ea578c3c79edb89
x86_64 java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el8.x86_64.rpm 0a522f347a335e8a922b9ce80197aea7e55b120fa1b61e907948f0e0ad3c783b
x86_64 java-11-openjdk-src-fastdebug-11.0.20.0.8-2.el8.x86_64.rpm 1b1aad6be188192fdafea85e390d6d87c63f4c0c93bab7ae4003a81dc77e6e00
x86_64 java-11-openjdk-11.0.20.0.8-2.el8.x86_64.rpm 212b2d5a395440fc8b3d50e6b81b56111eb8fc0b74d92fc346f0c8340100567c
x86_64 java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el8.x86_64.rpm 2406d1f10f42d6604a44ffc92621af91f323bdcc35dc9c12d426d5c99a65a4c2
x86_64 java-11-openjdk-headless-11.0.20.0.8-2.el8.x86_64.rpm 371ed3b40d5d3ab59ef8bd56875b236237bbda68e0e1106a70c1f7555aeef666
x86_64 java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el8.x86_64.rpm 41a77d2d243f953ebbc4791800ddcdabcc280d88eced53a5506853d0f2e49767
x86_64 java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el8.x86_64.rpm 677e0c6e5767b87e3bff0fe766a3cda929e143908eb2429c39ff98614f824d18
x86_64 java-11-openjdk-demo-11.0.20.0.8-2.el8.x86_64.rpm 71685e7c4f067d280868c188a10b1b190556da29340cde4d2637a28f3e48fc7f
x86_64 java-11-openjdk-devel-11.0.20.0.8-2.el8.x86_64.rpm 80eae59f2bbfcb5d696ff1720748e3346138b2e202bb28cdc6bd8a2966c0dcb4
x86_64 java-11-openjdk-static-libs-fastdebug-11.0.20.0.8-2.el8.x86_64.rpm 8d84512f06eccfef4db93c163b7c519a7edd55b0ac5267e55a7c98e970869df6
x86_64 java-11-openjdk-demo-fastdebug-11.0.20.0.8-2.el8.x86_64.rpm a31e3d88a5cc53f481bcdae59d737ccc25b91ab47de77a2cba719b95f2c0a2c3
x86_64 java-11-openjdk-devel-fastdebug-11.0.20.0.8-2.el8.x86_64.rpm a5013ccc1b6ff0cb6c6bd85d50bace95d99ef56b7b1d0a521cff7706f2757649
x86_64 java-11-openjdk-static-libs-11.0.20.0.8-2.el8.x86_64.rpm ad9b9af752e42c4994ef9266a232ffa10553106e59e9f05070de40466f6b2931
x86_64 java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el8.x86_64.rpm b53c2770d2716eed713f280985cb01ec1b5640014832fef1d6950c16af7cb28e
x86_64 java-11-openjdk-javadoc-11.0.20.0.8-2.el8.x86_64.rpm c8750bcfdc8de767b9c37b1edceec49d165ec8068b3f41da6408dff78780068f
x86_64 java-11-openjdk-src-11.0.20.0.8-2.el8.x86_64.rpm d1a7154cbfdd8dcb94be844d54e1cf5416e4222ee9c4c500cc45ad84757eee74
x86_64 java-11-openjdk-jmods-fastdebug-11.0.20.0.8-2.el8.x86_64.rpm d2ff4f3e2fbca2d49cf1d145ab4cfaa19bd4386fef377ba23835bcd6bedbf507
x86_64 java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el8.x86_64.rpm e71588bd346ecd4e07413f48f0c66a7105d9150544b8dedbb219540c886deff3
x86_64 java-11-openjdk-fastdebug-11.0.20.0.8-2.el8.x86_64.rpm f644459bf24368b1f6423eb34b4ea9ef21cc21b70259218458f4e3b5e3aa1c90
x86_64 java-11-openjdk-headless-fastdebug-11.0.20.0.8-2.el8.x86_64.rpm f8e6ee4fb99479c8512e300224cdc8c19ea510e9d5d5fea182dbdfb752dc6562
x86_64 java-11-openjdk-slowdebug-11.0.20.0.8-2.el8.x86_64.rpm fc31ccaa2f16bf16ef30d06f0534879d5c97f56c15ff2f3fb04647c54f20afa3
x86_64 java-11-openjdk-jmods-11.0.20.0.8-2.el8.x86_64.rpm fda9b1c8c4d0890214f1c53a1731ae480ef7f777d4b27b2f886b6cf20c0098a5
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.