Red Hat Security Advisory

RHSA-2021:4135

java-17-openjdk security update

Released 2021-11-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) java-17-openjdk-demo-fastdebug-1:17.0.1.0.12-2.el8_5, java-17-openjdk-demo-slowdebug-1:17.0.1.0.12-2.el8_5, java-17-openjdk-devel-fastdebug-1:17.0.1.0.12-2.el8_5 +11
Red Hat Enterprise Linux AppStream (v. 8) java-17-openjdk-1:17.0.1.0.12-2.el8_5, java-17-openjdk-demo-1:17.0.1.0.12-2.el8_5, java-17-openjdk-devel-1:17.0.1.0.12-2.el8_5 +6

TI-2021-14286 CVE-2021-35559 · GHSA-q7w5-cq9g-vhw8

MEDIUM 63

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.159 Published 2021-10-20 Partial fix CWE-400

TI-2021-14283 CVE-2021-35556 · GHSA-rx4c-whwx-3x45

MEDIUM 63

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08395 Published 2021-10-20 Partial fix CWE-693

TI-2021-14312 CVE-2021-35586 · GHSA-wr3h-rppv-6cm3

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0679 Published 2021-10-20 Partial fix

TI-2021-14305 CVE-2021-35578 · GHSA-2rqw-4rc9-x55v

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06679 Published 2021-10-20 Partial fix

TI-2021-14288 CVE-2021-35561 · GHSA-p43g-84w6-pq26

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06946 Published 2021-10-20 Partial fix

TI-2021-14291 CVE-2021-35564 · GHSA-7rmq-9jg5-p74g

LOW 39

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0563 Published 2021-10-20 Partial fix

TI-2021-14294 CVE-2021-35567 · GHSA-c9cq-84w8-7r7f

LOW 35

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.02902 Published 2021-10-20 Partial fix

TI-2021-14328 CVE-2021-35603 · GHSA-8272-q9p2-v9j7

LOW 25

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.04411 Published 2021-10-20 Partial fix