RHSA-2023:3136: Moderate: java-1.8.0-ibm security update
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.This update upgrades IBM Java SE 8 to version 8 SR8.Security Fix(es): OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426) OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) (CVE-2023-21830) OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:3136?
The severity of RHSA-2023:3136 is classified as high due to an unbounded memory allocation vulnerability.
How do I fix RHSA-2023:3136?
You can fix RHSA-2023:3136 by upgrading to IBM Java SE 8 version 8 SR8.
What versions of Java are affected by RHSA-2023:3136?
Affected versions include IBM Java SE 8 prior to version 8 SR8.
What vulnerability is addressed in RHSA-2023:3136?
RHSA-2023:3136 addresses an unbounded memory allocation when compiling crafted XPath expressions.
Is a reboot required after applying the fix for RHSA-2023:3136?
A reboot is not required after applying the fix for RHSA-2023:3136, but restarting the affected applications is recommended.