Red Hat Security Advisory: java-1.8.0-ibm security update

Fixed packages 6

Vulnerabilities 5

• Medium 5.3
  CVE-2021-35561

  Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Support…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 20, 2021
• Medium 5.3
  CVE-2022-21434

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Apr 19, 2022
• Medium 5.3
  CVE-2022-21496

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Sup…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Apr 19, 2022
• Low 3.7
  CVE-2022-21443

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Apr 19, 2022
• Unscored —
  CVE-2021-41041

  In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification …

  The Eclipse Foundation Eclipse OpenJ9 eclipse Ubuntu
  Apr 27, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2014524
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2075793
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2075836
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2075849
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4959.json
• report
  https://access.redhat.com/security/cve/CVE-2021-35561
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-35561
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-35561
• report
  https://access.redhat.com/security/cve/CVE-2021-41041
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2080954
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-41041
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-41041
• report
  https://access.redhat.com/security/cve/CVE-2022-21434
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21434
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21434
• report
  https://access.redhat.com/security/cve/CVE-2022-21443
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21443
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21443
• report
  https://access.redhat.com/security/cve/CVE-2022-21496
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-21496
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-21496