Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-40433: An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | java-1.8.0-openjdk | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-accessibility | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-accessibility-debug | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-debug | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-debuginfo | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-demo | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-demo-debug | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-devel | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-devel-debug | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-headless | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-headless-debug | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-javadoc | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-javadoc-debug | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-javadoc-zip | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-javadoc-zip-debug | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-src | 1:1.8.0.382.b05-1.amzn2.0.2 |
| Amazon Linux · 2 | java-1.8.0-openjdk-src-debug | 1:1.8.0.382.b05-1.amzn2.0.2 |
Vulnerabilities 1
-
Unscored —CVE-2022-40433 Rejected
** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2022-40433.html