Red Hat Security AdvisoryRHSA-2021:3892
java-11-openjdk security and bug fix update
Released 2021-10-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) java-11-openjdk-1:11.0.13.0.8-1.el7_9, java-11-openjdk-headless-1:11.0.13.0.8-1.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) java-11-openjdk-demo-1:11.0.13.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.13.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.13.0.8-1.el7_9 +4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-11-openjdk-demo-1:11.0.13.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.13.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.13.0.8-1.el7_9 +4
- Red Hat Enterprise Linux Server (v. 7) java-11-openjdk-1:11.0.13.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.13.0.8-1.el7_9, java-11-openjdk-headless-1:11.0.13.0.8-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) java-11-openjdk-demo-1:11.0.13.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.13.0.8-1.el7_9, java-11-openjdk-javadoc-zip-1:11.0.13.0.8-1.el7_9 +3
- Red Hat Enterprise Linux Workstation (v. 7) java-11-openjdk-1:11.0.13.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.13.0.8-1.el7_9, java-11-openjdk-headless-1:11.0.13.0.8-1.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) java-11-openjdk-demo-1:11.0.13.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.13.0.8-1.el7_9, java-11-openjdk-javadoc-zip-1:11.0.13.0.8-1.el7_9 +3
Fixes 10 records
Priority MEDIUM 63
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.159 · Published 2021-10-20 · Partial fix CWE-400
Priority MEDIUM 63
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.08395 · Published 2021-10-20 · Partial fix CWE-693
Priority MEDIUM 40
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0679 · Published 2021-10-20 · Partial fix
Priority MEDIUM 40
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06679 · Published 2021-10-20 · Partial fix
Priority MEDIUM 40
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.07395 · Published 2021-10-20 · Partial fix
Priority MEDIUM 40
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.06946 · Published 2021-10-20 · Partial fix
Priority LOW 39
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0563 · Published 2021-10-20 · Partial fix
Priority LOW 37
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.07376 · Published 2021-10-20 · Partial fix
Priority LOW 35
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
CVSS 3.1MEDIUM 6.8· Network · Low privileges · User interaction · EPSS 0.02902 · Published 2021-10-20 · Partial fix
Priority LOW 25
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.04411 · Published 2021-10-20 · Partial fix