What is RHSA-2023:0389?

RHSA-2023:0389 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: OpenJDK 17.0.6 Security Update for Portable Linux Builds

Which CVE IDs does RHSA-2023:0389 cover?

RHSA-2023:0389 covers the following CVE IDs: CVE-2023-21835, CVE-2023-21843. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2023:0389?

RHSA-2023:0389 has a CVSS v3 base score of 5.3, published by Red Hat Product Security.

Which products are affected by RHSA-2023:0389?

RHSA-2023:0389 affects 1 product, including: Red Hat Build of OpenJDK 17.0.6.

RHSA-2023:0389MediumCVSS 5.3

Red Hat Security Advisory: OpenJDK 17.0.6 Security Update for Portable Linux Builds

Vendor

Red Hat Product Security

Published

January 23, 2023

Last Modified

September 7, 2026

🔗 CVE IDs covered (2)

CVE-2023-21835 →CVE-2023-21843 →

📋 Description

CVE-2023-21835 — OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) CVE-2023-21843 — OpenJDK: soundbank URL remote loading (Sound, 8293742)

🎯 Affected products1

Red Hat Build of OpenJDK 17.0.6

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (5)

selfhttps://access.redhat.com/errata/RHSA-2023:0389
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2160421
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2160475
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0389.json