Red Hat Security Advisory: java-1.8.0-ibm security update

Fixed packages 6

Vulnerabilities 8

• High 7.5
  CVE-2021-35560

  Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected …

  Oracle Java SE JDK and JRE
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35556

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35559 EPSS 16%

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35564

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Support…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35565

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35578

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2021-35586

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Support…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Unscored —
  CVE-2021-41035

  In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inacce…

  The Eclipse Foundation Eclipse OMR
  Oct 25, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014508
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014515
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014518
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2015061
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2015308
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2015653
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2027731
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2027791
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_5030.json
• report
  https://access.redhat.com/security/cve/CVE-2021-35556
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35556
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35556
• report
  https://access.redhat.com/security/cve/CVE-2021-35559
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35559
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35559
• report
  https://access.redhat.com/security/cve/CVE-2021-35560
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35560
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35560
• report
  https://access.redhat.com/security/cve/CVE-2021-35564
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35564
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35564
• report
  https://access.redhat.com/security/cve/CVE-2021-35565
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35565
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35565
• report
  https://access.redhat.com/security/cve/CVE-2021-35578
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35578
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35578
• report
  https://access.redhat.com/security/cve/CVE-2021-35586
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35586
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35586
• report
  https://access.redhat.com/security/cve/CVE-2021-41035
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-41035
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-41035