What is RHSA-2023:0387?

RHSA-2023:0387 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: OpenJDK 8u362 Security Update for Portable Linux Builds

Which CVE IDs does RHSA-2023:0387 cover?

RHSA-2023:0387 covers the following CVE IDs: CVE-2023-21843, CVE-2023-21830. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2023:0387?

RHSA-2023:0387 has a CVSS v3 base score of 5.3, published by Red Hat Product Security.

Which products are affected by RHSA-2023:0387?

RHSA-2023:0387 affects 1 product, including: Red Hat Build of OpenJDK 8u362.

RHSA-2023:0387MediumCVSS 5.3

Red Hat Security Advisory: OpenJDK 8u362 Security Update for Portable Linux Builds

Vendor

Red Hat Product Security

Published

January 23, 2023

Last Modified

September 7, 2026

🔗 CVE IDs covered (2)

CVE-2023-21843 →CVE-2023-21830 →

📋 Description

CVE-2023-21830 — OpenJDK: improper restrictions in CORBA deserialization (Serialization, 8285021) CVE-2023-21843 — OpenJDK: soundbank URL remote loading (Sound, 8293742)

🎯 Affected products1

Red Hat Build of OpenJDK 8u362

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (5)

selfhttps://access.redhat.com/errata/RHSA-2023:0387
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2160475
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2160490
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0387.json