[ALSA-2023:4158] Moderate: java-11-openjdk security and bug fix update
Type:
security
Severity:
moderate
Release date:
2023-07-21
Description:
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) * harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193) * OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006) * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-9] (BZ#2223100)
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 java-11-openjdk-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm 04f0edb7c78d1a85b8d02943f0a13b751a68672d7682322822b8529e9dd3415a
aarch64 java-11-openjdk-static-libs-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm 1516a435b9475261f10117741ce9a48dda12a9e1d50c1d63050f848602d337ba
aarch64 java-11-openjdk-jmods-11.0.20.0.8-2.el9.aarch64.rpm 286d34624cd19089f0f255a1b4df396ce1c7829404ac09348988b149660e06e9
aarch64 java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm 2c8a5accb3d1718bdb77ca99eaaa92fb27f9faa2680c23adfd5577c51973bab9
aarch64 java-11-openjdk-src-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm 3c0c2cc912db074518c23fdd5ae946ed7278a101b15b6bb6768536011ffa5363
aarch64 java-11-openjdk-static-libs-11.0.20.0.8-2.el9.aarch64.rpm 43b11dc1003ed9cddc40b8fbfd59e54504dab13218434794804043431edfab7f
aarch64 java-11-openjdk-devel-11.0.20.0.8-2.el9.aarch64.rpm 4aa2a79784aea17ffcb4ef189a57ec64a3ce8aef50e45612e0b9d6802beb1a95
aarch64 java-11-openjdk-headless-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm 4d668cd6d252cc653daa9eb052109f724dd0bef759e6fa25c4057e07ab8f8f20
aarch64 java-11-openjdk-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm 5130f89fc90a1253dfe14153e17cd07a816f09f1a4a189144efc05cee427b99c
aarch64 java-11-openjdk-src-11.0.20.0.8-2.el9.aarch64.rpm 539eb52042254b698c8f2a3eff39b2753b9e2bac1e055b7cd0eb57023ec908bf
aarch64 java-11-openjdk-jmods-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm 58380d323660208d5c4ad0db7375069d658418d8d2297fa0278da6d99f9de265
aarch64 java-11-openjdk-11.0.20.0.8-2.el9.aarch64.rpm 7fbd5c928ad31ffac8cf7b96ebb8d22629139f3c402b5c13b207f449eaf9efa5
aarch64 java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm a7d25a93ec13b5c70947ade6474f3c8563fa071180da1f65e3965d9b79017cfd
aarch64 java-11-openjdk-demo-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm ab224c5908f5da973d32f4525c2110d6457add4069d5f42985b602cb06ead661
aarch64 java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm b0d8c9f2629e4dad764d9b5e8ad077b999cc4c6b5cd9baa2c2144e1b0e0eb379
aarch64 java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm c05303b3e99bf109962b08f03813d48be268c10fb3b52fd8938ab1ba3366db6e
aarch64 java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el9.aarch64.rpm d52d8b929e0f66cee56bed6ccf1d10235d1d449327d02780278be1dea20f3939
aarch64 java-11-openjdk-demo-11.0.20.0.8-2.el9.aarch64.rpm db6ddbfd033a073481b5fab627249e0cffc7a6e0ca20a44ba2d412703027c1ed
aarch64 java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm dce99ccae34309510e08218eb893d18990112bdb4a3c203c5f55ac425a309599
aarch64 java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el9.aarch64.rpm e50c1f8818a924efbf74b07f6227fc3dd9e2f93f9baa72eb56e51eaa36652a88
aarch64 java-11-openjdk-javadoc-11.0.20.0.8-2.el9.aarch64.rpm edd412bac2a7e32cb8ed06e4c3bb00c1735193bcfdf9a5d49edf609a4f9310cd
aarch64 java-11-openjdk-headless-11.0.20.0.8-2.el9.aarch64.rpm f01f72fba7c1cd38d1685703de1453335ecc867688fbe0e1061ae41e4b56bdb8
aarch64 java-11-openjdk-devel-fastdebug-11.0.20.0.8-2.el9.aarch64.rpm f34d410b36f90a948d86276274e5ad441b4c9073304b56bfc6bf10d1e3cb31f7
ppc64le java-11-openjdk-src-11.0.20.0.8-2.el9.ppc64le.rpm 0487bef33c68ce9a80f0b3bc1553420547c27a32c1d3170a15284a72bf0dbcf5
ppc64le java-11-openjdk-headless-11.0.20.0.8-2.el9.ppc64le.rpm 0a9d5c455def77f9fc0493bbad52b6ef3a45b029024f4fbf8d73b32b0cca0dfc
ppc64le java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el9.ppc64le.rpm 102e6985f73def007254063b92f29962215d20484e9c6d6371ee5f30185f4b72
ppc64le java-11-openjdk-static-libs-fastdebug-11.0.20.0.8-2.el9.ppc64le.rpm 17a3e743e3813e4d99c725875ef3e1e6159bfbd73426b9e82fa20b0d610722c5
ppc64le java-11-openjdk-jmods-fastdebug-11.0.20.0.8-2.el9.ppc64le.rpm 24dd1978f19a6659a58192a1c7bab858645784feb16fbf06c204ea8aa54cc471
ppc64le java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el9.ppc64le.rpm 4cf0bdd69010ac8b2abd6b0a5ff7e4fefddfde74a53e90401dc08893fe0d5ae4
ppc64le java-11-openjdk-demo-fastdebug-11.0.20.0.8-2.el9.ppc64le.rpm 5785a6cc92d7024b804078902aeebd0b90af917383704d12b80e007aebc4ac1c
ppc64le java-11-openjdk-slowdebug-11.0.20.0.8-2.el9.ppc64le.rpm 5e163db80d74eb3aaf3144c09fe0dc1c3748acb920e456b7a7713a5cb9d06ef3
ppc64le java-11-openjdk-src-fastdebug-11.0.20.0.8-2.el9.ppc64le.rpm 78b76f48971498631f8c64daa5b3fd8f659fe6ad894c87f38dcb62345d3158e8
ppc64le java-11-openjdk-11.0.20.0.8-2.el9.ppc64le.rpm 79237dcaf8405e2d2fbd6c8c461ef38cb8e5720ee8247a45a6fd2e882a6a95f8
ppc64le java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el9.ppc64le.rpm a34a4689f5dcac2ccda43867978b9f84ed263c0edf6da1e00c693b1241b7ddfd
ppc64le java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el9.ppc64le.rpm a60c5b68ab64853d72ac5b3b584b7d364fa5d4c48c0ac9d393c31bdcb3c8c771
ppc64le java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el9.ppc64le.rpm a834ab743d8732616757b9ea898d27c6e32491ad5990f91fbe92da0a420d0e93
ppc64le java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el9.ppc64le.rpm aa75d5db973da9652092cf60e428ed2095f3feb0fba3ac6461bcb44fb69b6662
ppc64le java-11-openjdk-devel-fastdebug-11.0.20.0.8-2.el9.ppc64le.rpm c3789cda5cfc041c7eebcb8917c908dd86840a8b7b536afdcb8bfb878b5b48cf
ppc64le java-11-openjdk-fastdebug-11.0.20.0.8-2.el9.ppc64le.rpm c6597199e486fd22414704928c040af6fac1595ea6ee8c36691bac755d2bd7b9
ppc64le java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el9.ppc64le.rpm ca3166ff14bb8943e7b218234e4b1be27e64e9a91ec42745b62c702b624d9bbd
ppc64le java-11-openjdk-demo-11.0.20.0.8-2.el9.ppc64le.rpm ce58d38b9f527d331f1b27f13da94533e07620c40d32ee5e36568ab5b86c0ede
ppc64le java-11-openjdk-static-libs-11.0.20.0.8-2.el9.ppc64le.rpm d5625a98d9c04ce9340efea74ee39b76ed53c16ed4d24b1e6660dfef76029303
ppc64le java-11-openjdk-devel-11.0.20.0.8-2.el9.ppc64le.rpm e49e361cff5f8ae5320565f8c06e8834be2726d852e0e5c3204507527f4189c2
ppc64le java-11-openjdk-jmods-11.0.20.0.8-2.el9.ppc64le.rpm ed94a13dfb503bc1b3f00804a441ab520c98ccd8dda05b6390f650a87869d5f0
ppc64le java-11-openjdk-javadoc-11.0.20.0.8-2.el9.ppc64le.rpm eefa0e90dad86248d1050eb4d77051f951c4532a5998a7f433bb367061d5bb1c
ppc64le java-11-openjdk-headless-fastdebug-11.0.20.0.8-2.el9.ppc64le.rpm f67123bae14fb63f210d66ccf7df612988febec1328db30448b3b8c0ff6171a4
s390x java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el9.s390x.rpm 086ce2c65853f8992175fa557147c33e6837e12a1a966b2bd6330895845863e9
s390x java-11-openjdk-headless-11.0.20.0.8-2.el9.s390x.rpm 209a50e2b8ad4894460af0813aea4affa7202ad5c99e651d698f4506609cc32d
s390x java-11-openjdk-demo-11.0.20.0.8-2.el9.s390x.rpm 3e07e351d3d08ceaa222c02e8154b48266373cd483a9c85bf9c32b80a728132a
s390x java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el9.s390x.rpm 3f4da64d37062c5047d430210fc27ce8e285c6b1822211ddf98221709bce9606
s390x java-11-openjdk-11.0.20.0.8-2.el9.s390x.rpm 6806b35ed5dc15432384f57b6ebb865a7e3a355a539bb29c09a902fe061433cb
s390x java-11-openjdk-src-11.0.20.0.8-2.el9.s390x.rpm 72f03c64ee4583fd28aed919124871bbfb21ccac86bf8cd06e5651e7350c9098
s390x java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el9.s390x.rpm 737de8ddfc0ff38dd5c6a80a18fae37dd8f8b9e4f3119572667c65f5c206fafe
s390x java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el9.s390x.rpm 76f945c8e02275e30bcf2de88441369586ab4bc2d73241527e6b8dac66c3c739
s390x java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el9.s390x.rpm 79f54e20ed5bdaff84997812af258c6174b2e7c60fec5af6bbb76753b27fef07
s390x java-11-openjdk-slowdebug-11.0.20.0.8-2.el9.s390x.rpm 7baec4c8d07cc7a517e24d989c4904549240bbf85c5d2854adc2a6a570c926ce
s390x java-11-openjdk-static-libs-11.0.20.0.8-2.el9.s390x.rpm 7d4262568c30d422185b07eea5331ff3d0c2a029621ecbbde1e94931b2bb8d12
s390x java-11-openjdk-devel-11.0.20.0.8-2.el9.s390x.rpm aea3851118a7c4b8ce5f8c5dd8174102f6dfcc4d04b28b599f2cd2144f2420a6
s390x java-11-openjdk-jmods-11.0.20.0.8-2.el9.s390x.rpm bc0a17fec1502e95b89ce0a9d3abb2a3e884269d166b493afaa9a4ea88e8e5b8
s390x java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el9.s390x.rpm d9904df7006d315bd4d73318da9dc0d8ec95a2de8648a88b08b9bb8d77705a9f
s390x java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el9.s390x.rpm dd0bf251c6e39ca70cf62fb0b86c0bf67963e98ff20d0d7c7e883f4b63c926c2
s390x java-11-openjdk-javadoc-11.0.20.0.8-2.el9.s390x.rpm f6e8d9644b085c928dfb912ac74d11d25d67f340e225e95488b2ad6991bcdb32
x86_64 java-11-openjdk-static-libs-11.0.20.0.8-2.el9.x86_64.rpm 05fc2e9e35d7d40761756891ef827aa3ac89916d4fed235ce993e992eb4f3ccc
x86_64 java-11-openjdk-jmods-fastdebug-11.0.20.0.8-2.el9.x86_64.rpm 1686d9e732f74e77a2c82eea964870284b667ea13c51a4ffe4d7b1bdf5e83f39
x86_64 java-11-openjdk-devel-fastdebug-11.0.20.0.8-2.el9.x86_64.rpm 2f61f0306f616a934b1e7bce37627f71af1fe0d5fafe76f0cf89eccc76f65367
x86_64 java-11-openjdk-javadoc-11.0.20.0.8-2.el9.x86_64.rpm 375c1242a7ff4deb87973367e63661b73bcf214b0feb5e0b09334b72018e822e
x86_64 java-11-openjdk-jmods-11.0.20.0.8-2.el9.x86_64.rpm 39c18b8ea4c08bda9ab8046b7ce71682d936847e130b3404345a77a83e3ca779
x86_64 java-11-openjdk-demo-11.0.20.0.8-2.el9.x86_64.rpm 530df7edb9006d0041f7b856b10b859cbec60cd1d785bd812c602b66a871c387
x86_64 java-11-openjdk-static-libs-slowdebug-11.0.20.0.8-2.el9.x86_64.rpm 6255d1ed456e1310fbeba4940bdd839cb6115e028605d33f532581ccb663573d
x86_64 java-11-openjdk-devel-slowdebug-11.0.20.0.8-2.el9.x86_64.rpm 6276b2580c06bf8ffcf0f29d61f78cae50290ccaa227bed41cd6cf4772f5269c
x86_64 java-11-openjdk-devel-11.0.20.0.8-2.el9.x86_64.rpm 6389b0ff14f57f0819e18241109a5b9f2230a355d1eab33b3d9cfe2aeb2c5c0a
x86_64 java-11-openjdk-jmods-slowdebug-11.0.20.0.8-2.el9.x86_64.rpm 649ace8e1275606d46c0d1cbb6214cea964c4c931c25045096c07a547dd05a86
x86_64 java-11-openjdk-demo-fastdebug-11.0.20.0.8-2.el9.x86_64.rpm 70cc1c84fa2cca91929988b73b76d004f966429fa10bae826498846d3080f372
x86_64 java-11-openjdk-headless-fastdebug-11.0.20.0.8-2.el9.x86_64.rpm 758001b5aa4fae5abd1736881ba1aae04569d0357a4dd007bbee7e200a0eb0a7
x86_64 java-11-openjdk-fastdebug-11.0.20.0.8-2.el9.x86_64.rpm 888b2b819d3876894d45ee286f05d4e1ec8a249a4b9a08cdb247acc2d46d0543
x86_64 java-11-openjdk-headless-slowdebug-11.0.20.0.8-2.el9.x86_64.rpm 92263512bcc0cd1f855324de174d591db8ccc19d2f033108765d9d665834f749
x86_64 java-11-openjdk-src-slowdebug-11.0.20.0.8-2.el9.x86_64.rpm 93b8bdeb828d3da7494f6fac3a663c55acceb670785d19e69720635ede9d8388
x86_64 java-11-openjdk-static-libs-fastdebug-11.0.20.0.8-2.el9.x86_64.rpm a4eeac43a7595b5f5dd2f7c9d38af2196c86ea89ba98ef12d7f2cec5fd4722cf
x86_64 java-11-openjdk-src-11.0.20.0.8-2.el9.x86_64.rpm a8a4074061fb6f5726bc6146e8fb2af2099f37e291abeee27a6dce8c65dae084
x86_64 java-11-openjdk-demo-slowdebug-11.0.20.0.8-2.el9.x86_64.rpm aca677ac1ede792e216643139f3964e33ff236bc4a57bf6bfdd7eebfe73de16e
x86_64 java-11-openjdk-11.0.20.0.8-2.el9.x86_64.rpm d19e993b6c89dd18e68ee8798d8dfa9a89c8ee1e60d1d522af0fe0f0ad5e4d34
x86_64 java-11-openjdk-slowdebug-11.0.20.0.8-2.el9.x86_64.rpm d3b72453f2e7f7b8994e8ae5a8d5a7d559c728422697f2d45610be1c6fe3b35c
x86_64 java-11-openjdk-headless-11.0.20.0.8-2.el9.x86_64.rpm e298f632d1c1e4a800d7db22824917f6c19775d8881c95ba98d660d58e7ba193
x86_64 java-11-openjdk-javadoc-zip-11.0.20.0.8-2.el9.x86_64.rpm ee66fe23439182d473c53c8ea9008b4eca8f4685c3e60c41bf565ce8d58860f9
x86_64 java-11-openjdk-src-fastdebug-11.0.20.0.8-2.el9.x86_64.rpm fd159d0c915b74233a70ad8de600ce11c4380f1024ab053cf18abe77a55839e1
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.