Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Red Hat Java 17 OpenJDK could let attackers run code
published 2 years ago
Summary
The Java 17 OpenJDK packages from Red Hat, including development and debugging versions, contain a flaw that could let a malicious user cause the program to run unwanted code. This could lead to data theft or system disruption. Apply the latest Red Hat security update for these packages as soon as possible.
What to do
- Update redhat java-17-openjdk to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-debuginfo to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-debugsource to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-demo to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-devel to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-devel-debuginfo to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-devel-fastdebug-debuginfo to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-devel-slowdebug-debuginfo to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-fastdebug-debuginfo to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-headless to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-headless-debuginfo to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-headless-fastdebug-debuginfo to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-headless-slowdebug-debuginfo to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-javadoc to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-javadoc-zip to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-jmods to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-slowdebug-debuginfo to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-src to version 1:17.0.8.0.7-1.el8_4.
- Update redhat java-17-openjdk-static-libs to version 1:17.0.8.0.7-1.el8_4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-debugsource |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-demo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-devel |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-devel-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-devel-fastdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-devel-slowdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-fastdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-headless |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-headless-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-headless-fastdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-headless-slowdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-javadoc |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-javadoc-zip |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-jmods |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-slowdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-src |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_aus:8.4::appstream | redhat | java-17-openjdk-static-libs |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-debugsource |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-demo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-devel |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-devel-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-devel-fastdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-devel-slowdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-fastdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-headless |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-headless-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-headless-fastdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-headless-slowdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-javadoc |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-javadoc-zip |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-jmods |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-slowdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-src |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_e4s:8.4::appstream | redhat | java-17-openjdk-static-libs |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-debugsource |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-demo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-devel |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-devel-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-devel-fastdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-devel-slowdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-fastdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-headless |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-headless-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-headless-fastdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
Showing 50 of 57. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-headless-slowdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-javadoc |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-javadoc-zip |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-jmods |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-slowdebug-debuginfo |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-src |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
| Red Hat:rhel_tus:8.4::appstream | redhat | java-17-openjdk-static-libs |
< 1:17.0.8.0.7-1.el8_4 Fix: upgrade to 1:17.0.8.0.7-1.el8_4
|
Original advisory text
Red Hat Security Advisory: java-17-openjdk security update
References
- https://access.redhat.com/errata/RHSA-2023:4171 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2167254 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2221619 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2221626 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2221634 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2221642 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2221645 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2221647 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2223207 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4171.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-22006 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-22006 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-22006 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-22036 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-22036 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-22036 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-22041 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-22041 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-22041 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-22044 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-22044 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-22044 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-22045 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-22045 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-22045 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-22049 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-22049 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-22049 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-25193 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-25193 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-25193 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published16 Sep 2024
Updated23 Sep 2026
First seen23 Sep 2026
Sources
RHSA-2023:4171 · OSV
Track software like this
Free during beta