Red Hat Security Advisory

RHSA-2021:5030

java-1.8.0-ibm security update

Released 2021-12-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.7.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.7.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.7.0-1jpp.1.el7 +3
Red Hat Enterprise Linux ComputeNode Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.7.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.7.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.7.0-1jpp.1.el7 +1
Red Hat Enterprise Linux Server Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.7.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.7.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.7.0-1jpp.1.el7 +3
Red Hat Enterprise Linux Workstation Supplementary (v. 7) java-1.8.0-ibm-1:1.8.0.7.0-1jpp.1.el7, java-1.8.0-ibm-demo-1:1.8.0.7.0-1jpp.1.el7, java-1.8.0-ibm-devel-1:1.8.0.7.0-1jpp.1.el7 +3

TI-2021-14286 CVE-2021-35559 · GHSA-q7w5-cq9g-vhw8

MEDIUM 63

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.159 Published 2021-10-20 Partial fix CWE-400

TI-2021-14283 CVE-2021-35556 · GHSA-rx4c-whwx-3x45

MEDIUM 63

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08395 Published 2021-10-20 Partial fix CWE-693

TI-2021-17899 CVE-2021-41035 · GHSA-cj9m-62w3-rj89

MEDIUM 46

In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01824 Published 2021-10-25 Fixed in 0.29.0 CWE-250

TI-2021-14287 CVE-2021-35560 · GHSA-q6fp-hjwx-q999

MEDIUM 43

Vulnerability in the Java SE product of Oracle Java SE (component: Deployment).

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.0483 Published 2021-10-20 Fixed

TI-2021-14312 CVE-2021-35586 · GHSA-wr3h-rppv-6cm3

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0679 Published 2021-10-20 Partial fix

TI-2021-14305 CVE-2021-35578 · GHSA-2rqw-4rc9-x55v

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.06679 Published 2021-10-20 Partial fix

TI-2021-14292 CVE-2021-35565 · GHSA-fgv2-95mg-h2m9

MEDIUM 40

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.07395 Published 2021-10-20 Partial fix

TI-2021-14291 CVE-2021-35564 · GHSA-7rmq-9jg5-p74g

LOW 39

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0563 Published 2021-10-20 Partial fix