Red Hat Security Advisory

RHSA-2021:3893

java-1.8.0-openjdk security and bug fix update

Released 2021-10-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.312.b07-1.el8_4, java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.312.b07-1.el8_4, java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.312.b07-1.el8_4 +9
Red Hat Enterprise Linux AppStream (v. 8) java-1.8.0-openjdk-1:1.8.0.312.b07-1.el8_4, java-1.8.0-openjdk-accessibility-1:1.8.0.312.b07-1.el8_4, java-1.8.0-openjdk-demo-1:1.8.0.312.b07-1.el8_4 +5

Fixes 11 records

TI-2021-14286 CVE-2021-35559 · GHSA-q7w5-cq9g-vhw8

Uncontrolled resource consumption in Oracle Java SE JDK and JRE

MEDIUM 63

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.159 Published 2021-10-20 Partial fix CWE-400

TI-2021-14283 CVE-2021-35556 · GHSA-rx4c-whwx-3x45

Protection mechanism failure in Oracle Java SE JDK and JRE

MEDIUM 63

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08395 Published 2021-10-20 Partial fix CWE-693

TI-2021-14312 CVE-2021-35586 · GHSA-wr3h-rppv-6cm3

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0679 Published 2021-10-20 Partial fix

TI-2021-14305 CVE-2021-35578 · GHSA-2rqw-4rc9-x55v

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06679 Published 2021-10-20 Partial fix

TI-2021-14292 CVE-2021-35565 · GHSA-fgv2-95mg-h2m9

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07395 Published 2021-10-20 Partial fix

TI-2021-14288 CVE-2021-35561 · GHSA-p43g-84w6-pq26

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06946 Published 2021-10-20 Partial fix

TI-2021-14291 CVE-2021-35564 · GHSA-7rmq-9jg5-p74g

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

LOW 39

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0563 Published 2021-10-20 Partial fix

TI-2021-14278 CVE-2021-35550 · GHSA-cxjm-7856-gv52

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

LOW 37

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.07376 Published 2021-10-20 Partial fix

TI-2021-14294 CVE-2021-35567 · GHSA-c9cq-84w8-7r7f

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

LOW 35

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.02902 Published 2021-10-20 Partial fix

TI-2021-14328 CVE-2021-35603 · GHSA-8272-q9p2-v9j7

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

LOW 25

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.04411 Published 2021-10-20 Partial fix

TI-2021-14314 CVE-2021-35588 · GHSA-7rph-qx8r-r9gw

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

LOW 22

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.03868 Published 2021-10-20 Partial fix