Linux · Security advisory · July 17, 2023

RHSA-2023:4103: Security update for 8 packages

RHSA-2023:4103, released July 17, 2023, fixes 7 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0250

84th percentile

Patch now 0
                                Urgent 0
                                High 2
                                Routine 5

Fixed package versions

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2022-40609	java-1.8.0-ibm-headless: IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This upda...	8.1	0.0176	None reported
High	CVE-2023-21930	Microsoft Build of OpenJDK with Hotspot 11 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…	7.4	0.0130	None reported
Routine	CVE-2023-21939	Microsoft Build of OpenJDK with Hotspot 11 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…	5.3	0.0250	None reported
Routine	CVE-2023-21967	Microsoft Build of OpenJDK with Hotspot 11 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…	5.9	0.0154	None reported
Routine	CVE-2023-21937	Microsoft Build of OpenJDK with Hotspot 11 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…	3.7	0.0122	None reported
Routine	CVE-2023-21938	Microsoft Build of OpenJDK with Hotspot 11 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…	3.7	0.0122	None reported
Routine	CVE-2023-21968	Microsoft Build of OpenJDK with Hotspot 11 and 1 other: Improper Access Control	3.7	0.0104	None reported