What is RHSA-2023:1903?

RHSA-2023:1903 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: OpenJDK 8u372 Security Update for Portable Linux Builds

What is the CVSS v3 score of RHSA-2023:1903?

RHSA-2023:1903 has a CVSS v3 base score of 7.4, published by Red Hat Product Security.

Which products are affected by RHSA-2023:1903?

RHSA-2023:1903 affects 1 product, including: Red Hat Build of OpenJDK 8u362.

RHSA-2023:1903HighCVSS 7.4

Red Hat Security Advisory: OpenJDK 8u372 Security Update for Portable Linux Builds

Vendor

Red Hat Product Security

Published

April 25, 2023

Last Modified

September 7, 2026

🔗 CVE IDs covered (7)

CVE-2023-21930 →CVE-2023-21937 →CVE-2023-21938 →CVE-2023-21939 →CVE-2023-21954 →CVE-2023-21967 →CVE-2023-21968 →

📋 Description

CVE-2023-21930 — OpenJDK: improper connection handling during TLS handshake (8294474) CVE-2023-21937 — OpenJDK: missing string checks for NULL characters (8296622) CVE-2023-21938 — OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) CVE-2023-21939 — OpenJDK: Swing HTML parsing issue (8296832) CVE-2023-21954 — OpenJDK: incorrect enqueue of references in garbage collector (8298191) CVE-2023-21967 — OpenJDK: certificate validation issue in TLS session negotiation (8298310) CVE-2023-21968 — OpenJDK: missing check for slash characters in URI-to-path conversion (8298667)

🎯 Affected products1

Red Hat Build of OpenJDK 8u362

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (7)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (10)