openjdk-8-source 8u342-b07-0ubuntu1~18.04: openjdk-8-source 8u342-b07-0ubuntu1~18.04 for Ubuntu 18.04.6 LTS (bionic)

openjdk-8-source 8u342-b07-0ubuntu1~18.04, released July 19, 2022, fixes 21 CVEs in openjdk-8-source. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.8176

99th percentile

Priority of the 21 CVEs

Patch now 0
                                Urgent 0
                                High 8
                                Routine 13

Fixed package versions

Product	Release	Fixed in
openjdk-8-source	Ubuntu 18.04.6 LTS (bionic)	8u342-b07-0ubuntu1~18.04

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2022-34169	Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets	9.8	0.8176	None reported
High	CVE-2022-21540	Microsoft Build of OpenJDK with Hotspot 11 and 1 other: Use After Free	7.5	0.0417	None reported
High	CVE-2022-21476	openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries)	7.5	0.0405	None reported
High	CVE-2022-21426	openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: JAXP)	7.5	0.0318	None reported
High	CVE-2022-21541	Microsoft Build of OpenJDK with Hotspot 11 and 1 other: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…	7.5	0.0288	None reported
High	CVE-2022-21496	openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: JNDI)	7.5	0.0281	None reported
High	CVE-2022-21443	openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries)	7.5	0.0273	None reported
High	CVE-2022-21434	openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries)	7.5	0.0256	None reported
Routine	CVE-2022-21293	Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption	5.3	0.0896	None reported
Routine	CVE-2022-21340	Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption	5.3	0.0819	None reported
Routine	CVE-2022-21283	Microsoft Build of OpenJDK with Hotspot 11: Protection Mechanism Failure	5.3	0.0407	None reported
Routine	CVE-2022-21341	Microsoft Build of OpenJDK with Hotspot 11: Deserialization of Untrusted Data	5.3	0.0405	None reported
Routine	CVE-2022-21248	Microsoft Build of OpenJDK with Hotspot 11: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…	5.3	0.0404	None reported
Routine	CVE-2022-21360	Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption	5.3	0.0375	None reported
Routine	CVE-2022-21365	Microsoft Build of OpenJDK with Hotspot 11: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:…	5.3	0.0375	None reported
Routine	CVE-2022-21299	Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption	5.3	0.0372	None reported
Routine	CVE-2022-21294	Microsoft Build of OpenJDK with Hotspot 11: Allocation of Resources Without Limits or Throttling	5.3	0.0360	None reported
Routine	CVE-2022-21349	openjdk-8-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D)	n/a	0.0355	None reported
Routine	CVE-2022-21282	Microsoft Build of OpenJDK with Hotspot 11: Improper Restriction of XML External Entity Reference	5.3	0.0309	None reported
Routine	CVE-2022-21296	Microsoft Build of OpenJDK with Hotspot 11: Exposure of Sensitive Information to an Unauthorized Actor	5.3	0.0304	None reported
Routine	CVE-2022-21305	Microsoft Build of OpenJDK with Hotspot 11: Improper Access Control	5.3	0.0296	None reported

Also fixes CVE-2022-34169

OPENSUSE-SU-2025:0066-1
java-11-openj9 on opensuse-leap 15.6
openjdk-8-demo 8u342-b07-0ubuntu1~18.04
openjdk-8-demo on Ubuntu 18.04.6 LTS (bionic)
openjdk-8-demo 8u342-b07-0ubuntu1~20.04
openjdk-8-demo on Ubuntu 20.04 LTS (focal)
openjdk-8-demo 8u342-b07-0ubuntu1~22.04
openjdk-8-demo on Ubuntu 22.04.1 LTS (jammy)
openjdk-8-jdk 8u342-b07-0ubuntu1~18.04
openjdk-8-jdk on Ubuntu 18.04.6 LTS (bionic)
openjdk-8-jdk 8u342-b07-0ubuntu1~20.04
openjdk-8-jdk on Ubuntu 20.04 LTS (focal)
openjdk-8-jdk 8u342-b07-0ubuntu1~22.04
openjdk-8-jdk on Ubuntu 22.04.1 LTS (jammy)
openjdk-8-jdk-headless 8u342-b07-0ubuntu1~18.04
openjdk-8-jdk-headless on Ubuntu 18.04.6 LTS (bionic)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-bionic-openjdk-8-source-8u342-b07-0ubuntu1-18.04">openjdk-8-source 8u342-b07-0ubuntu1~18.04 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.