USN-5897-1: OpenJDK vulnerabilities

Read Time:28 Second

Juraj Somorovsky, Marcel Maehren, Nurullah Erinola, and Robert Merget
discovered that the DTLS implementation in the JSSE subsystem of OpenJDK
did not properly restrict handshake initiation requests from clients. A
remote attacker could possibly use this to cause a denial of service.
(CVE-2023-21835)

Markus Loewe discovered that the Java Sound subsystem in OpenJDK did not
properly validate the origin of a Soundbank. An attacker could use this to
specially craft an untrusted Java application or applet that could load a
Soundbank from an attacker controlled remote URL. (CVE-2023-21843)

DOGE to Fired CISA Staff: Email Us Your Personal Data

Windows Shortcut Flaw Exploited by 11 State-Sponsored Groups

752,000 Browser Phishing Attacks Mark 140% Increase YoY

Brian Cox to Discuss Quantum Computing’s Impact at Infosecurity Europe 2025

Sneaky 2FA Joins Tycoon 2FA and EvilProxy in 2025 Phishing Surge

Fortinet Vulnerability Exploited in Ransomware Attack, CISA Warns

Gartner Warns Agentic AI Will Accelerate Account Takeovers

Europol Warns of “Shadow Alliance” Between States and Criminals

The AI Fix #42: AIs with anxiety, and why AIs don’t know what happened

USN-5897-1: OpenJDK vulnerabilities

USN-7360-1: Alpine vulnerabilities

Drupal core – Moderately critical – Cross Site Scripting – SA-CORE-2025-004

moby-engine-28.0.2-1.fc43

webkitgtk-2.48.0-1.fc42

webkitgtk-2.48.0-1.fc41

webkitgtk-2.48.0-1.fc40