RLSA-2023:0208 --- java-1.8.0-openjdkID: oval:org.secpod.oval:def:4501186 | Date: (C)2023-03-13 (M)2024-02-19 |
Class: PATCH | Family: unix |
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fix: * OpenJDK: improper restrictions in CORBA deserialization * OpenJDK: soundbank URL remote loading For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Bug Fix: * Leak File Descriptors Because of ResolverLocalFilesystem#engineResolveURI * Prepare for the next quarterly OpenJDK upstream release [rhel-8] * solr broken due to access denied [rhel-8, openjdk-8]
Product: |
java-1.8.0-openjdk |