CVE-2021-41041

En Eclipse Openj9 versiones anteriores a 0.32.0, Java 8 y 11 no lanzan la excepción capturada durante la verificación del código de bytes cuando la verificación es desencadenada por una invocación de MethodHandle, permitiendo invocar métodos no verificados mediante MethodHandles

An update that fixes 9 vulnerabilities is now available. This update for java-1_8_0-openj9 fixes the following issues. Fixed an integer truncation issue in the Xalan Java XSLT library that occurred when processing malicious stylesheets. Fixed a potential bypass of sandbox restrictions in the Hotspot component. Fixed a potential bypass of sandbox restrictions in the Hotspot component. Failed an issue that could allow unverified methods to be invoked using MethodHandles. Fixed a remote partial denial of service issue. Fixed an issue that could allow a remote attacker to update, insert or delete data. Fixed a remote partial denial of service issue. Fixed an issue that could allow unauthorized access to confidential data. Fixed an issue that could allow a remote attacker to update, insert or delete data.