RHSA-2021:3889 — Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Fixed packages 34

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::client	java-1.8.0-openjdk	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client	java-1.8.0-openjdk-accessibility	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client	java-1.8.0-openjdk-debuginfo	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client	java-1.8.0-openjdk-demo	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client	java-1.8.0-openjdk-devel	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client	java-1.8.0-openjdk-headless	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client	java-1.8.0-openjdk-javadoc	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client	java-1.8.0-openjdk-javadoc-zip	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::client	java-1.8.0-openjdk-src	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode	java-1.8.0-openjdk-accessibility	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode	java-1.8.0-openjdk-debuginfo	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode	java-1.8.0-openjdk-demo	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode	java-1.8.0-openjdk-devel	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode	java-1.8.0-openjdk-javadoc	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode	java-1.8.0-openjdk-javadoc-zip	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::computenode	java-1.8.0-openjdk-src	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server	java-1.8.0-openjdk	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server	java-1.8.0-openjdk-accessibility	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server	java-1.8.0-openjdk-debuginfo	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server	java-1.8.0-openjdk-demo	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server	java-1.8.0-openjdk-devel	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server	java-1.8.0-openjdk-headless	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server	java-1.8.0-openjdk-javadoc	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server	java-1.8.0-openjdk-javadoc-zip	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::server	java-1.8.0-openjdk-src	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation	java-1.8.0-openjdk	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation	java-1.8.0-openjdk-accessibility	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation	java-1.8.0-openjdk-debuginfo	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation	java-1.8.0-openjdk-demo	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation	java-1.8.0-openjdk-devel	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation	java-1.8.0-openjdk-headless	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation	java-1.8.0-openjdk-javadoc	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation	java-1.8.0-openjdk-javadoc-zip	1:1.8.0.312.b07-1.el7_9
Red Hat · RHEL 7 enterprise_linux:7::workstation	java-1.8.0-openjdk-src	1:1.8.0.312.b07-1.el7_9

Vulnerabilities 11

Medium 6.8

CVE-2021-35567

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Suppo…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.9

CVE-2021-35550

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35556

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35559 EPSS 16%

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35561

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Support…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35564

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Support…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35565

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35578

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Medium 5.3

CVE-2021-35586

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Support…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Low 3.7

CVE-2021-35603

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 20, 2021
Low 3.1

CVE-2021-35588

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Support…

Oracle Java SE JDK and JRE openjdk-8 openjdk-9 Ubuntu Alpine

Oct 20, 2021

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1862929
report
https://bugzilla.redhat.com/show_bug.cgi?id=1999735
report
https://bugzilla.redhat.com/show_bug.cgi?id=2014508
report
https://bugzilla.redhat.com/show_bug.cgi?id=2014515
report
https://bugzilla.redhat.com/show_bug.cgi?id=2014518
report
https://bugzilla.redhat.com/show_bug.cgi?id=2014524
report
https://bugzilla.redhat.com/show_bug.cgi?id=2015061
report
https://bugzilla.redhat.com/show_bug.cgi?id=2015308
report
https://bugzilla.redhat.com/show_bug.cgi?id=2015311
report
https://bugzilla.redhat.com/show_bug.cgi?id=2015648
report
https://bugzilla.redhat.com/show_bug.cgi?id=2015653
report
https://bugzilla.redhat.com/show_bug.cgi?id=2015658
report
https://bugzilla.redhat.com/show_bug.cgi?id=2015659
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3889.json
report
https://access.redhat.com/security/cve/CVE-2021-35550
advisory
https://www.cve.org/CVERecord?id=CVE-2021-35550
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-35550
report
https://access.redhat.com/security/cve/CVE-2021-35556
advisory
https://www.cve.org/CVERecord?id=CVE-2021-35556
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-35556
report
https://access.redhat.com/security/cve/CVE-2021-35559
advisory
https://www.cve.org/CVERecord?id=CVE-2021-35559
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-35559
report
https://access.redhat.com/security/cve/CVE-2021-35561
advisory
https://www.cve.org/CVERecord?id=CVE-2021-35561
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-35561
report
https://access.redhat.com/security/cve/CVE-2021-35564
advisory
https://www.cve.org/CVERecord?id=CVE-2021-35564
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-35564
report
https://access.redhat.com/security/cve/CVE-2021-35565
advisory
https://www.cve.org/CVERecord?id=CVE-2021-35565
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-35565
report
https://access.redhat.com/security/cve/CVE-2021-35567
advisory
https://www.cve.org/CVERecord?id=CVE-2021-35567
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-35567
report
https://access.redhat.com/security/cve/CVE-2021-35578
advisory
https://www.cve.org/CVERecord?id=CVE-2021-35578
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-35578

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Fixed packages 34

Vulnerabilities 11

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Suppo…

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Support…

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Support…

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Support…

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Support…

References