Lucene search

K
cloudlinuxCloudLinuxCLSA-2022:1659638796
HistoryAug 04, 2022 - 6:46 p.m.

Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-34169, CVE-2022-21540

2022-08-0418:46:36
repo.cloudlinux.com
41

0.002 Low

EPSS

Percentile

53.1%

  • Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u342-b07. That fixes following CVEs:
  • CVE-2022-34169: Integer truncation issue in Xalan-J
  • CVE-2022-21540: Class compilation issue
  • CVE-2022-21541: Improper restriction of MethodHandle.invokeBasic()
  • Update tzdata requirement to 2022a to match JDK-8283350
  • Remove patch for MakeBase.gmk cause issue was fixed in sources
  • Correct parameters passing to CheckVendor test