Important: java-1.8.0-openjdk security update (Amazon Linux 2)

Summary

Fixed packages 17

Vulnerabilities 3

• High 7.5
  CVE-2022-34169 Public exploit EPSS 82%

  Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

  The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are re…

  Apache Software Foundation Apache Xalan-J openjdk-8 openjdk-lts Debian Ubuntu Alpine Maven
  Jul 19, 2022
• Medium 5.9
  CVE-2022-21541

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 19, 2022
• Medium 5.3
  CVE-2022-21540

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jul 19, 2022

References

• web
  https://alas.aws.amazon.com/cve/html/CVE-2022-21540.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2022-21541.html
• web
  https://alas.aws.amazon.com/cve/html/CVE-2022-34169.html