Red Hat Security Advisory: java-11-openjdk security and bug fix update

Fixed packages 38

Vulnerabilities 10

• Medium 6.8
  CVE-2021-35567

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Suppo…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.9
  CVE-2021-35550

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35556

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35559 EPSS 16%

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35561

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Support…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35564

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Support…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35565

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35578

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35586

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Support…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Low 3.7
  CVE-2021-35603

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1698873
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1999936
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014508
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014515
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014518
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014524
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2015061
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2015308
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2015311
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2015648
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2015653
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2015658
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3892.json
• report
  https://access.redhat.com/security/cve/CVE-2021-35550
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35550
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35550
• report
  https://access.redhat.com/security/cve/CVE-2021-35556
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35556
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35556
• report
  https://access.redhat.com/security/cve/CVE-2021-35559
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35559
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35559
• report
  https://access.redhat.com/security/cve/CVE-2021-35561
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35561
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35561
• report
  https://access.redhat.com/security/cve/CVE-2021-35564
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35564
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35564
• report
  https://access.redhat.com/security/cve/CVE-2021-35565
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35565
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35565
• report
  https://access.redhat.com/security/cve/CVE-2021-35567
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35567
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35567
• report
  https://access.redhat.com/security/cve/CVE-2021-35578
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35578
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35578
• report
  https://access.redhat.com/security/cve/CVE-2021-35586