JPCERT-AT-2023-0012
JPCERT/CC
2023-07-19

I. Overview

On July 18, 2023 (Local Time), Oracle released critical patch updates for multiple Oracle products.

Oracle Corporation
Oracle Critical Patch Update Advisory - July 2023
https://www.oracle.com/security-alerts/cpujul2023.html

Users of the affected products are recommended to update to the latest version appropriately by referring to the information provided by Oracle.

Oracle Corporation
Text Form of Oracle Critical Patch Update - July 2023 Risk Matrices
https://www.oracle.com/security-alerts/cpujul2023verbose.html

II. Solutions

Oracle has provided patches that address vulnerabilities in each product. Some products or applications may not run properly after updating the software to the latest version. Please update to the latest version after considering any possible impacts to the products or applications.

In addition, there are cases where Java JRE is pre-installed on the PC or WebLogic is used in software products for servers. Please check if any of the affected products is included in the PCs or servers that you use.

The latest version of Java can be downloaded from the following link.

Java Downloads for All Operating Systems
https://www.java.com/en/download/manual.jsp

III. References

Oracle Corporation
Oracle Java SE Support Roadmap
https://www.oracle.com/java/technologies/java-se-support-roadmap.html

Oracle Corporation
Critical Patch Updates, Security Alerts and Bulletins
https://www.oracle.com/security-alerts/

Oracle Corporation
July 2023 Critical Patch Update Released
https://blogs.oracle.com/security/post/july-2023-cpu

If you have any information regarding this alert, please contact JPCERT/CC.

JPCERT Coordination Center (Early Warning Group)
MAIL: ew-info@jpcert.or.jp
https://www.jpcert.or.jp/english/