A java-17-openjdk security and bug fix update has been released for AlmaLinux 8.

ALSA-2023:4159 Moderate: java-17-openjdk security and bug fix update

Type:
security

Severity:
moderate

Release date:
2023-07-21

Description
Security Fix(es):
* OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
* OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
* OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
* harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
* OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
* OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
* OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221655)
* Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) almalinux-8 (BZ#2222368)

References:
CVE-2023-22006
CVE-2023-22036
CVE-2023-22041
CVE-2023-22044
CVE-2023-22045
CVE-2023-22049
CVE-2023-25193
RHSA-2023:4159
ALSA-2023:4159

Updates packages:
java-17-openjdk-javadoc-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-src-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-devel-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-javadoc-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-headless-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-javadoc-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-src-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-src-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-static-libs-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-demo-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-demo-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-src-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-src-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-jmods-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-javadoc-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-demo-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-headless-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-devel-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-slowdebug-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-demo-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-static-libs-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-devel-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-devel-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-devel-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-devel-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-headless-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-src-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-src-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-headless-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-jmods-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-static-libs-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-jmods-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-headless-slowdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-static-libs-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-javadoc-zip-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-jmods-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-static-libs-slowdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-demo-slowdebug-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-jmods-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-static-libs-fastdebug-17.0.8.0.7-2.el8.ppc64le.rpm
java-17-openjdk-demo-fastdebug-17.0.8.0.7-2.el8.aarch64.rpm
java-17-openjdk-headless-fastdebug-17.0.8.0.7-2.el8.x86_64.rpm
java-17-openjdk-src-slowdebug-17.0.8.0.7-2.el8.s390x.rpm
java-17-openjdk-jmods-17.0.8.0.7-2.el8.x86_64.rpm

Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

  ALSA-2023:4159 Moderate: java-17-openjdk security and bug fix update