[ALSA-2023:4177] Moderate: java-17-openjdk security and bug fix update
Type:
security
Severity:
moderate
Release date:
2023-07-21
Description:
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) * OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) * OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) * harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193) * OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006) * OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044) * OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221653) * Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-9] (BZ#2222852)
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm 0d8e7b8faf89e0be5a42e6366f1f91cfa0812e0f59e9d191071d4ba3916ce291
aarch64 java-17-openjdk-javadoc-17.0.8.0.7-2.el9.aarch64.rpm 11a3e23d012535899e5669d4760852ea94131d9007eef53f2fe106794416cc1d
aarch64 java-17-openjdk-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm 28bb54e9a41a4fe31cb194b1d670b3546887678c4a47f7ce9c3de02f5ba3b324
aarch64 java-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm 34289710829d5043699d8db6a08450eff2a5200c84dfa74c4e5425c73bb685ed
aarch64 java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm 53bb39ca020e76b43b91007285868fd0ab6d2a31c849bb07529e42f245c5cc08
aarch64 java-17-openjdk-demo-17.0.8.0.7-2.el9.aarch64.rpm 553ce8fa1fde7720f2dbfb590345963df494830080f83ce29543dfba154fd947
aarch64 java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm 5bfe226ecb16fbb71d4a5558ab3e6dfd2ebd00f05d7a91427c26703306b76770
aarch64 java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm 5c927d9f506b1ea53d1d9b880ec56ae75a69b876b09731c5328fd68efa1bef2d
aarch64 java-17-openjdk-jmods-17.0.8.0.7-2.el9.aarch64.rpm 7672aa80fc4a3cc44852e18cc690afcef068680cedc8f16a5903dd2a5d13b651
aarch64 java-17-openjdk-devel-17.0.8.0.7-2.el9.aarch64.rpm 772c3b3693456e05049f4a9b0b7d48cad201dc22b01cd09dca9e84ccb1384a8a
aarch64 java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el9.aarch64.rpm 7ecd4ec2f96e2ad77f50ee647063c0fadf00fc174dfb125eb08c6a1b135eb7c3
aarch64 java-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm 96b71e843587127671f2cce95f5d886af4c0aa0755af87215f190d2956b6b40a
aarch64 java-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm 97d704a48f33897c3c0addf3102ab6772e7dd91f1611b5a924f29ff291b784c0
aarch64 java-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm a3fb7bf05471e78e1b39c847f61647abc8ce0df5faa904eb10d91016a1574c63
aarch64 java-17-openjdk-headless-17.0.8.0.7-2.el9.aarch64.rpm ac4e50009823184dff9795a8018093ce8fac3dd225a04a852832ac86c6c85a54
aarch64 java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm bf1f3672221b4da5b8fa839285dd41c4106341c14738c187bad5fd32f428f49e
aarch64 java-17-openjdk-static-libs-17.0.8.0.7-2.el9.aarch64.rpm c3a4ac04e5399a14b5a92ac803c9e03b5be2002a3504af20e914426f6e24b361
aarch64 java-17-openjdk-src-17.0.8.0.7-2.el9.aarch64.rpm c84697663005ea30ffdabd391a3b968fa30ee1316fc84fa8569715e87da952fd
aarch64 java-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm d5ca0d4ccb3652aa013512654591001b8ee22a541b8358a62baf1c7ca27f7b52
aarch64 java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el9.aarch64.rpm d762eb1865b287824ee1d516aea138fee5bebef990a9ee2ac3ae728d6fc317f0
aarch64 java-17-openjdk-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm d9aa813cca3aed7ebc6acb1296b21e171c0a866f54cda5e6e192674452fc2797
aarch64 java-17-openjdk-src-fastdebug-17.0.8.0.7-2.el9.aarch64.rpm ef080ae49d451bf28554135907e0b1d40c71faba4aadb6584a9a0b18d9b1156d
aarch64 java-17-openjdk-17.0.8.0.7-2.el9.aarch64.rpm fee0d1fb060920ab9f0ef042e76d2683c79cd733a81e38677a43b6a7c0c1350c
ppc64le java-17-openjdk-slowdebug-17.0.8.0.7-2.el9.ppc64le.rpm 09bd3f3a061aa499209585f8a3ff4c9e249a925a7187e96082ca81bc335442a2
ppc64le java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el9.ppc64le.rpm 0e6bba87b3fd1106e2384955f622f3f2aa6f2f30f0e6d99a6fdb0a56450284a9
ppc64le java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el9.ppc64le.rpm 1387f18ea0c277ab90c64253a1ede2d838c7ceda19b333e8295d42445730a612
ppc64le java-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el9.ppc64le.rpm 177a933aae8802b65f9be0a1e72b529a596554a6870d032f15a14fa744d5c58d
ppc64le java-17-openjdk-headless-17.0.8.0.7-2.el9.ppc64le.rpm 198825ca5e89754a7ea2ab27125654d72ffab0f7e274339271e06030d5a6f735
ppc64le java-17-openjdk-static-libs-17.0.8.0.7-2.el9.ppc64le.rpm 1bfd7bbcba92d7d1f3a1464c8f7807f8f0e7376e0754d1a63e6a4e543f4132a7
ppc64le java-17-openjdk-jmods-17.0.8.0.7-2.el9.ppc64le.rpm 5efe33cf0a907eb1a9eb05925dcb9780abb22ef959336d818881b4f75945273a
ppc64le java-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el9.ppc64le.rpm 6c1db86932c1fcecb4c4a999f2733cc20feef899eb5ec4d5bf678a769dbc7824
ppc64le java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el9.ppc64le.rpm 724c582964860b3a3cc292b13962a54425db4cf92f4fc1ad0e847955214bfc36
ppc64le java-17-openjdk-devel-17.0.8.0.7-2.el9.ppc64le.rpm 9cdf1604ba9fcf6daf728987a619bef622d865f991a542702035ccb7cee03a32
ppc64le java-17-openjdk-fastdebug-17.0.8.0.7-2.el9.ppc64le.rpm ab4f2278121d623706eb93d31529155444d5c53ab922b522c5e2d4117175a47c
ppc64le java-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el9.ppc64le.rpm c29540be14afbc3b4f82d2f2c5d93e1e1f09123e629d1d67cb65dec17a34004a
ppc64le java-17-openjdk-src-fastdebug-17.0.8.0.7-2.el9.ppc64le.rpm c7a26f277d29586ac774700c72fde6261b2a6df4cf219276eeee631ac5aeece0
ppc64le java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el9.ppc64le.rpm cdc6cfda5f124e86805bda79b452f6090d35a1a937bfb019724afdf0e2f15635
ppc64le java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el9.ppc64le.rpm cfc97da49050138884dd83a2b7c2c50586e3b701157cc7df0470830d5013d15e
ppc64le java-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el9.ppc64le.rpm d28b8b35b6cd37ece04a016964c23951ee77ada9950f552dfd4b19c37713605e
ppc64le java-17-openjdk-javadoc-17.0.8.0.7-2.el9.ppc64le.rpm da84b565e206b3e67fd6684a675ad4658e3da276b51378abb6eca272d9b3226e
ppc64le java-17-openjdk-17.0.8.0.7-2.el9.ppc64le.rpm dc64a5b48982ea577d7cd4732de7d2a2238bcc3620eeb1b680d4b350671bf68c
ppc64le java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el9.ppc64le.rpm def204d2b681b02abe18cdcb0c6e8a423573e82b1be4bc0f8e314aac4f643609
ppc64le java-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el9.ppc64le.rpm fa9b05f14157163e71476ac94fbf8180fdd9aa6f44f03e6d2b2ed0dba668aa3b
ppc64le java-17-openjdk-src-17.0.8.0.7-2.el9.ppc64le.rpm fb66f0d0f188b3597fa58606b1beb7d86ad441fbd14927e329f454cc81b48b3c
ppc64le java-17-openjdk-demo-17.0.8.0.7-2.el9.ppc64le.rpm fb8eb8a8d10da3bcdce6d2a5897162f0720c63dacc7dee0e68bfc7f1621704a4
ppc64le java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el9.ppc64le.rpm fcef1cec05c4cb3da3c1c21095deda421607830e1967d5328a50f3e72c753e09
s390x java-17-openjdk-javadoc-17.0.8.0.7-2.el9.s390x.rpm 05b51ef8ffec46b19bf6f030bca1f86d5cb5dc5e7a6e39ca93184ddab99eab7d
s390x java-17-openjdk-headless-17.0.8.0.7-2.el9.s390x.rpm 11142efd15ee89cf6aa113847d033cd2a486903001c915ada8253b6b66348a92
s390x java-17-openjdk-17.0.8.0.7-2.el9.s390x.rpm 1ede67e22d29c46fdabb22b464a7b29bf51ca8bcba42d9f1386c71fef73e2475
s390x java-17-openjdk-devel-17.0.8.0.7-2.el9.s390x.rpm 30dd29e83f715ba055df52f58b6e4d9277428da20ca4ffa7a565523fd0c3adb7
s390x java-17-openjdk-slowdebug-17.0.8.0.7-2.el9.s390x.rpm 438d6786dbb40f45049c109d562d8ef5cdc90dca4de18897d89737b577c16f41
s390x java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el9.s390x.rpm 66534cd9741a2b251d79b98a8e961627fc7898d1607d3a243572a587d890686c
s390x java-17-openjdk-demo-17.0.8.0.7-2.el9.s390x.rpm 7fa7db4a7231a0d6bc8eff37f89539547d6759c80096a291c92a8beeff7886ae
s390x java-17-openjdk-jmods-17.0.8.0.7-2.el9.s390x.rpm 83e5b0de704b43a637c13a4297b3703287a51adf81dbfc4da19c3de197fc5b7f
s390x java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el9.s390x.rpm 876cd161ac73a15789e40b66bc146b4067355bd18f3218a0aa35be4abb6f8093
s390x java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el9.s390x.rpm 9a8e152bcd0493ee8a2aa3d22e663c16862686268ef9166d66525cd4ed20c5aa
s390x java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el9.s390x.rpm a6dd314dc46459854310b1c0724aa6fcdff1a462484fa19002ceaf3e8e9c191e
s390x java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el9.s390x.rpm a8443e467143dd7a86e36d49dae41ffb6e996d119461841717201287be26f6e6
s390x java-17-openjdk-static-libs-17.0.8.0.7-2.el9.s390x.rpm afb9cfe8abfc703a22511b05b76c03c7c62e45afe8066593e3db321dab07f9a9
s390x java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el9.s390x.rpm c68084001a2eaf611b11232410cfb6c277e22a94386007ab954ddba4ed5f4d24
s390x java-17-openjdk-src-17.0.8.0.7-2.el9.s390x.rpm cf2d95dd19a71df8fceebd378f024329f2f4a499d73acdb7280ac211aaf29b20
s390x java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el9.s390x.rpm de9f936071f39ea7862299f9def890584b5ce46a45a8098709bb744c0cfa0381
x86_64 java-17-openjdk-headless-17.0.8.0.7-2.el9.x86_64.rpm 083f5fb0bc40da00d97106ce7ca2dab0ffa30de827c2586242764e4c1957177f
x86_64 java-17-openjdk-demo-17.0.8.0.7-2.el9.x86_64.rpm 0d922b2e5f6cdc5d0db45f4db8d08fc8608e38e0ff4375e3f22eb4ff9b35a70e
x86_64 java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el9.x86_64.rpm 3cdcc3b5eab9da384b4c9a052e0eabbd617e732adc3ee34400873c264757c64f
x86_64 java-17-openjdk-jmods-17.0.8.0.7-2.el9.x86_64.rpm 4ddf4fc2c30f80a1a3c7f77d1fca9fbd352a4744ee94e2f525c1840054b5ba92
x86_64 java-17-openjdk-src-fastdebug-17.0.8.0.7-2.el9.x86_64.rpm 535fd6ebf2acc8d63a3328d096b9ec9753461864ace45d1e11ff0650dd9d9219
x86_64 java-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el9.x86_64.rpm 56a449b589633fc41f122270831e3d6b64d7c47182d4b608ab770935eab1e4e0
x86_64 java-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el9.x86_64.rpm 5acb8d021d9be866fdd68c08fdcf68671df876e07a61994a3fa839ba4f6150ae
x86_64 java-17-openjdk-src-17.0.8.0.7-2.el9.x86_64.rpm 6930354599dcf30e03b3ea9d05c54c7df1a4a2c3b04867417857e6ba627827a3
x86_64 java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el9.x86_64.rpm 718529712b2860ed8ee29517685b36f9328e9ccf47aa107f2d36de3f4fe8120a
x86_64 java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el9.x86_64.rpm 758b08d791e1960de1b1459bb1059c0c62f74f7ef1984c71683ce38a053873f8
x86_64 java-17-openjdk-17.0.8.0.7-2.el9.x86_64.rpm 7938b7819e92d09c545369998602c76296dc39f343390d0020a5d8c3ee8d1409
x86_64 java-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el9.x86_64.rpm 83b34f73a331ed77211848f525206b895aca181289044ec1f135cb04e8da5fa5
x86_64 java-17-openjdk-fastdebug-17.0.8.0.7-2.el9.x86_64.rpm 89949addb248ac5bbb8df8394986c532df85db3ee2663fb38a08e8b1220376ed
x86_64 java-17-openjdk-javadoc-17.0.8.0.7-2.el9.x86_64.rpm 8b02a4a050cc33b72256e8eaa7a0f150fd8f9e371663886e2649b17f2643294a
x86_64 java-17-openjdk-static-libs-17.0.8.0.7-2.el9.x86_64.rpm 97bf4e8e015225dddad326507f8a961f5e9909671eaecb9029238f906624ac9a
x86_64 java-17-openjdk-devel-17.0.8.0.7-2.el9.x86_64.rpm 99e2d85ac08b854da7283c16e4d11342a567eb81033773f56fb69e7b7bea51a4
x86_64 java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el9.x86_64.rpm 9df31e8cc2adbdc81e8a988445afb59f1df033ab45d0ffbf89c299feee24f014
x86_64 java-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el9.x86_64.rpm bbdc005d88aef89d02bf7cb5acc3d1e04eafdcc04dc3465333114b695c216e6c
x86_64 java-17-openjdk-slowdebug-17.0.8.0.7-2.el9.x86_64.rpm c8792b9ffd9d7480db8f7deb6a8686ffae115ec6116f914d98d42a90c985fd27
x86_64 java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el9.x86_64.rpm cf17f0d74af3eb3e14ef8e25be1ee1569f4ae3a3737943289292763cae1d7702
x86_64 java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el9.x86_64.rpm e78cf16f363bef4e4d347775d58f5110954eec552edeead835f9702ff5da34c8
x86_64 java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el9.x86_64.rpm eb25c04815980fc517c4b2ab1387342c96ddf30351715348f42f588f477cd304
x86_64 java-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el9.x86_64.rpm ebcd653e7337913e6f5b3967185090f0a13a46e85e9e63713b770d6ab9c8c7ad
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.