ELSA-2022-1728 — Important: java-11-openjdk security update (Oracle Linux 9)

Summary

[1:11.0.15.0.10-1]
- Update to jdk-11.0.15.0+10
- Update release notes to 11.0.15.0+10
- Switch to GA mode for release
- Rebase RH1996182 FIPS patch after JDK-8254410
- Resolves: rhbz#2073594

Fixed packages 23

Release	Package	Fixed in
Oracle Linux · 9	java-11-openjdk	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-demo	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-demo-fastdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-demo-slowdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-devel	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-devel-fastdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-devel-slowdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-fastdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-headless	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-headless-fastdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-headless-slowdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-javadoc	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-javadoc-zip	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-jmods	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-jmods-fastdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-jmods-slowdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-slowdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-src	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-src-fastdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-src-slowdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-static-libs	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-static-libs-fastdebug	1:11.0.15.0.10-1.el9_0
Oracle Linux · 9	java-11-openjdk-static-libs-slowdebug	1:11.0.15.0.10-1.el9_0

Vulnerabilities 5

High 7.5

CVE-2022-21476

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 19, 2022
Medium 5.3

CVE-2022-21426

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 19, 2022
Medium 5.3

CVE-2022-21434

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Apr 19, 2022
Medium 5.3

CVE-2022-21496

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Sup…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Apr 19, 2022
Low 3.7

CVE-2022-21443

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine

Apr 19, 2022

Important: java-11-openjdk security update (Oracle Linux 9)

Summary

Fixed packages 23

Vulnerabilities 5

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Sup…

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…