Red Hat Security Advisory

RHSA-2021:2845

java-1.8.0-openjdk security and bug fix update

Released 2021-07-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-1.8.0-openjdk-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.302.b08-0.el7_9
Red Hat Enterprise Linux Client Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.302.b08-0.el7_9 +3
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.302.b08-0.el7_9 +3
Red Hat Enterprise Linux Server (v. 7) java-1.8.0-openjdk-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.302.b08-0.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.302.b08-0.el7_9 +2
Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-openjdk-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.302.b08-0.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.302.b08-0.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.302.b08-0.el7_9 +2

TI-2021-02057 CVE-2021-2388 · GHSA-4h93-46mq-wpq9

MEDIUM 42

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.04008 Published 2021-07-20 Partial fix

TI-2021-02039 CVE-2021-2369 · GHSA-f45f-qwp3-mp29

LOW 26

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library).

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.03444 Published 2021-07-20 Partial fix

TI-2021-02011 CVE-2021-2341 · GHSA-w2ph-9hg3-84vp

LOW 22

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.04238 Published 2021-07-20 Partial fix