ELSA-2022-1491 — Important: java-1.8.0-openjdk security update (Oracle Linux 8)

Summary

[1:1.8.0.332.b09-1]
- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422

[1:1.8.0.332.b06-0.1.ea]
- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Switch to EA mode.
- Remove JDK-8279077 patch now upstream.
- Related: rhbz#2073422

Fixed packages 20

Release	Package	Fixed in
Oracle Linux · 8	java-1.8.0-openjdk	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-accessibility	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-accessibility-fastdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-accessibility-slowdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-demo	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-demo-fastdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-demo-slowdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-devel	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-devel-fastdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-devel-slowdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-fastdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-headless	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-headless-fastdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-headless-slowdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-javadoc	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-javadoc-zip	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-slowdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-src	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-src-fastdebug	1:1.8.0.332.b09-1.el8_5
Oracle Linux · 8	java-1.8.0-openjdk-src-slowdebug	1:1.8.0.332.b09-1.el8_5

Vulnerabilities 5

High 7.5

CVE-2022-21476

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 19, 2022
Medium 5.3

CVE-2022-21426

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 19, 2022
Medium 5.3

CVE-2022-21434

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 19, 2022
Medium 5.3

CVE-2022-21496

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Sup…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Apr 19, 2022
Low 3.7

CVE-2022-21443

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Apr 19, 2022

Important: java-1.8.0-openjdk security update (Oracle Linux 8)

Summary

Fixed packages 20

Vulnerabilities 5

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Sup…

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…