{"id":45395,"date":"2023-07-21T19:03:39","date_gmt":"2023-07-21T15:03:39","guid":{"rendered":"https:\/\/packetstormsecurity.com\/files\/173682\/RHSA-2023-4159-01.txt"},"modified":"2023-07-22T10:54:04","modified_gmt":"2023-07-22T06:24:04","slug":"red-hat-security-advisory-2023-4159-01-openjdk","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/red-hat-security-advisory-2023-4159-01-openjdk\/","title":{"rendered":"Red Hat Security Advisory 2023-4159-01 openjdk"},"content":{"rendered":"<p>&#8212;&#8211;BEGIN PGP SIGNED MESSAGE&#8212;&#8211;<br \/>\nHash: SHA256<\/p>\n<p>=====================================================================<br \/>\nRed Hat Security Advisory<\/p>\n<p>Synopsis: Moderate: java-17-openjdk security and bug fix update<br \/>\nAdvisory ID: RHSA-2023:4159-01<br \/>\nProduct: Red Hat Enterprise Linux<br \/>\nAdvisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2023:4159<br \/>\nIssue date: 2023-07-20<br \/>\nCVE Names: CVE-2023-22006 CVE-2023-22036 CVE-2023-22041<br \/>\nCVE-2023-22044 CVE-2023-22045 CVE-2023-22049<br \/>\nCVE-2023-25193<br \/>\n=====================================================================<\/p>\n<p>1. Summary:<\/p>\n<p>An update for java-17-openjdk is now available for Red Hat Enterprise Linux<br \/>\n8.<\/p>\n<p>Red Hat Product Security has rated this update as having a security impact<br \/>\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which<br \/>\ngives a detailed severity rating, is available for each vulnerability from<br \/>\nthe CVE link(s) in the References section.<\/p>\n<p>2. Relevant releases\/architectures:<\/p>\n<p>Red Hat Enterprise Linux AppStream (v. 8) &#8211; aarch64, ppc64le, s390x, x86_64<br \/>\nRed Hat Enterprise Linux CRB (v. 8) &#8211; aarch64, ppc64le, s390x, x86_64<\/p>\n<p>3. Description:<\/p>\n<p>The java-17-openjdk packages provide the OpenJDK 17 Java Runtime<br \/>\nEnvironment and the OpenJDK 17 Java Software Development Kit.<\/p>\n<p>Security Fix(es):<\/p>\n<p>* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)<\/p>\n<p>* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)<\/p>\n<p>* OpenJDK: improper handling of slash characters in URI-to-path conversion<br \/>\n(8305312) (CVE-2023-22049)<\/p>\n<p>* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)<\/p>\n<p>* OpenJDK: HTTP client insufficient file name validation (8302475)<br \/>\n(CVE-2023-22006)<\/p>\n<p>* OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)<\/p>\n<p>* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)<\/p>\n<p>For more details about the security issue(s), including the impact, a CVSS<br \/>\nscore, acknowledgments, and other related information, refer to the CVE<br \/>\npage(s) listed in the References section.<\/p>\n<p>Bug Fix(es):<\/p>\n<p>* Installing the same java-17-openjdk-headless package on two different<br \/>\nsystems resulted in distinct classes.jsa files getting generated. This was<br \/>\nbecause the CDS archive was being generated by a post script action of the<br \/>\njava-17-openjdk-headless package. This prevented the use of the dynamic<br \/>\ndump feature, as the checksum in the archive would be different on each<br \/>\nsystem. This is resolved in this release by using the .jsa files generated<br \/>\nduring the initial build. (RHBZ#2221655)<\/p>\n<p>* Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8)<br \/>\n[rhel-8] (BZ#2222368)<\/p>\n<p>4. Solution:<\/p>\n<p>For details on how to apply this update, which includes the changes<br \/>\ndescribed in this advisory, refer to:<\/p>\n<p>https:\/\/access.redhat.com\/articles\/11258<\/p>\n<p>All running instances of OpenJDK Java must be restarted for this update to<br \/>\ntake effect.<\/p>\n<p>5. Bugs fixed (https:\/\/bugzilla.redhat.com\/):<\/p>\n<p>2167254 &#8211; CVE-2023-25193 harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks<br \/>\n2221619 &#8211; OpenJDK: font processing denial of service vulnerability (8301998)<br \/>\n2221626 &#8211; CVE-2023-22006 OpenJDK: HTTP client insufficient file name validation (8302475)<br \/>\n2221634 &#8211; CVE-2023-22036 OpenJDK: ZIP file parsing infinite loop (8302483)<br \/>\n2221642 &#8211; CVE-2023-22044 OpenJDK: modulo operator array indexing issue (8304460)<br \/>\n2221645 &#8211; CVE-2023-22045 OpenJDK: array indexing integer overflow issue (8304468)<br \/>\n2221647 &#8211; CVE-2023-22049 OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312)<br \/>\n2221655 &#8211; Base JDK CDS archive (classes.jsa) not unique per JDK build [rhel-8,openjdk-17] [rhel-8.8.0.z]\n2222368 &#8211; Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [rhel-8] [rhel-8.8.0.z]\n2223207 &#8211; CVE-2023-22041 OpenJDK: weakness in AES implementation (8308682)<\/p>\n<p>6. Package List:<\/p>\n<p>Red Hat Enterprise Linux AppStream (v. 8):<\/p>\n<p>Source:<br \/>\njava-17-openjdk-17.0.8.0.7-2.el8.src.rpm<\/p>\n<p>aarch64:<br \/>\njava-17-openjdk-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-debugsource-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-demo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-devel-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-devel-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-headless-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-headless-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-javadoc-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-javadoc-zip-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-jmods-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-src-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-static-libs-17.0.8.0.7-2.el8.aarch64.rpm<\/p>\n<p>ppc64le:<br \/>\njava-17-openjdk-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-debugsource-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-demo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-devel-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-devel-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-headless-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-headless-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-javadoc-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-javadoc-zip-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-jmods-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-src-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-static-libs-17.0.8.0.7-2.el8.ppc64le.rpm<\/p>\n<p>s390x:<br \/>\njava-17-openjdk-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-debuginfo-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-debugsource-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-demo-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-devel-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-devel-debuginfo-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-headless-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-headless-debuginfo-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-javadoc-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-javadoc-zip-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-jmods-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-src-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-static-libs-17.0.8.0.7-2.el8.s390x.rpm<\/p>\n<p>x86_64:<br \/>\njava-17-openjdk-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-debugsource-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-demo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-devel-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-devel-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-headless-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-headless-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-javadoc-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-javadoc-zip-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-jmods-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-src-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-static-libs-17.0.8.0.7-2.el8.x86_64.rpm<\/p>\n<p>Red Hat Enterprise Linux CRB (v. 8):<\/p>\n<p>aarch64:<br \/>\njava-17-openjdk-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-debugsource-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-devel-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-devel-fastdebug-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-devel-slowdebug-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-fastdebug-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-headless-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-headless-fastdebug-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-headless-slowdebug-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-slowdebug-debuginfo-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-src-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-src-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm<br \/>\njava-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm<\/p>\n<p>ppc64le:<br \/>\njava-17-openjdk-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-debugsource-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-devel-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-devel-fastdebug-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-devel-slowdebug-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-fastdebug-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-headless-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-headless-fastdebug-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-headless-slowdebug-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-slowdebug-debuginfo-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-src-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-src-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm<br \/>\njava-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm<\/p>\n<p>s390x:<br \/>\njava-17-openjdk-debuginfo-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-debugsource-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-devel-debuginfo-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-devel-slowdebug-debuginfo-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-headless-debuginfo-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-headless-slowdebug-debuginfo-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-slowdebug-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-slowdebug-debuginfo-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-src-slowdebug-17.0.8.0.7-2.el8.s390x.rpm<br \/>\njava-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el8.s390x.rpm<\/p>\n<p>x86_64:<br \/>\njava-17-openjdk-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-debugsource-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-devel-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-devel-fastdebug-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-devel-slowdebug-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-fastdebug-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-headless-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-headless-fastdebug-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-headless-slowdebug-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-slowdebug-debuginfo-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-src-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-src-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm<br \/>\njava-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm<\/p>\n<p>These packages are GPG signed by Red Hat for security. Our key and<br \/>\ndetails on how to verify the signature are available from<br \/>\nhttps:\/\/access.redhat.com\/security\/team\/key\/<\/p>\n<p>7. References:<\/p>\n<p>https:\/\/access.redhat.com\/security\/cve\/CVE-2023-22006<br \/>\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2023-22036<br \/>\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2023-22041<br \/>\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2023-22044<br \/>\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2023-22045<br \/>\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2023-22049<br \/>\nhttps:\/\/access.redhat.com\/security\/cve\/CVE-2023-25193<br \/>\nhttps:\/\/access.redhat.com\/security\/updates\/classification\/#moderate<\/p>\n<p>8. Contact:<\/p>\n<p>The Red Hat security contact is &lt;secalert@redhat.com&gt;. More contact<br \/>\ndetails at https:\/\/access.redhat.com\/security\/team\/contact\/<\/p>\n<p>Copyright 2023 Red Hat, Inc.<br \/>\n&#8212;&#8211;BEGIN PGP SIGNATURE&#8212;&#8211;<br \/>\nVersion: GnuPG v1<\/p>\n<p>iQIbBAEBCAAGBQJkuYZ\/AAoJENzjgjWX9erEQkQP9jBNk1G2SQ2ZNNhJ98crFJAj<br \/>\nqYULgNPo0CkILsSzFOm9jpQ6PutcZlhEal6c7lPsM2o6k0JJ8M4aEaNNwAz2fOqI<br \/>\n1oSMOP9mUaJrisT+lg0V+UYhiNZ5\/dP4if4177I7inRIujpBR0WNhxgtdwnNTLIW<br \/>\nlRwPRGaCLkSIuDR8xXZvU4vjj2tm6TYln2hq\/RB0q1Xws+kkDeSX71WzPFY7krA3<br \/>\nsISb1GlsjwtoNbC12A\/E5\/vATNHYx4EjV6H2nB0SjRMNyhKpQzW5O07A2THtjxJ+<br \/>\ndotZIVxnXy5gbO8QdbKEggRsExa7LY+9r49n8MZ0aXeM9Am462LDNixUfNeNkApU<br \/>\n9lb9HtHwX+9xxXWdeFQGt7YW0\/XkLHz+duCbvvj3\/oJTiW0cIx\/BR60uHi7qmGL1<br \/>\nV2VlOUpdj9MM+eiwQTNW5i1mjEyeF+ACNXk92Zd+Fpno4bpEQ8Lxt1vN0XI4vAXU<br \/>\nIkWysnWKsOFwAh6vJQD9XOdKsLjWLqrV9oozmLYdbv5ZPt2YxX4vshqQ7jLSqwK2<br \/>\nqveHq8+ZetqvgbMiyjCe7qXr7etIBkbCE7m6Rj4S\/RoYBvTXtHhVN+tSoY4EInWM<br \/>\nU1oyPPeqYQs6R\/ZGlAsPzajPkDp+jDjEDdi+QdRb82W+U9aVFWYKi0xV0ddiWmfy<br \/>\n4ho4Q++gt2kkfVYd6oI=<br \/>\n=c4kF<br \/>\n&#8212;&#8211;END PGP SIGNATURE&#8212;&#8211;<br \/>\n&#8212;<br \/>\nRHSA-announce mailing list<br \/>\nRHSA-announce@redhat.com<br \/>\nhttps:\/\/listman.redhat.com\/mailman\/listinfo\/rhsa-announce<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8212;&#8211;BEGIN PGP SIGNED MESSAGE&#8212;&#8211; Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: java-17-openjdk security and bug fix update Advisory ID: RHSA-2023:4159-01 Product: Red Hat Enterprise Linux Advisory URL: https:\/\/access.redhat.com\/errata\/RHSA-2023:4159 Issue date: 2023-07-20 CVE Names: CVE-2023-22006 CVE-2023-22036 CVE-2023-22041 CVE-2023-22044 CVE-2023-22045 CVE-2023-22049 CVE-2023-25193 ===================================================================== 1. Summary: An update for java-17-openjdk is now available for Red Hat &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-45395","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/45395","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=45395"}],"version-history":[{"count":2,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/45395\/revisions"}],"predecessor-version":[{"id":45450,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/45395\/revisions\/45450"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=45395"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=45395"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=45395"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}