RHSA-2023:4160: Important: java-1.8.0-ibm security update
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.This update upgrades IBM Java SE 8 to version 8 SR8-FP5.Security Fix(es): OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930) OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939) OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967) OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937) OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938) OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Other sources
Important: java-1.8.0-ibm security update
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:4160?
The severity of RHSA-2023:4160 is high.
What is the affected software for RHSA-2023:4160?
The affected software for RHSA-2023:4160 is java-1.8.0-ibm.
How can I fix RHSA-2023:4160?
To fix RHSA-2023:4160, update your java-1.8.0-ibm package to version 1.8.0-ibm-1.8.0.8.5-1jpp.1.el7 or later.
Where can I find more information about RHSA-2023:4160?
You can find more information about RHSA-2023:4160 on the Red Hat Customer Portal.
Are there any known references related to RHSA-2023:4160?
Yes, there are references related to RHSA-2023:4160 which can be found on Bugzilla and the Red Hat Customer Portal.