The Oracle Critical Patch Update for July 2021 includes updates for Java SE [1] that fix 6 Java SE vulnerabilities.
Airlock Gateway uses Java in the Configuration Center and in several add-on modules.
Airlock IAM before version 7.0 relies on a separately installed Java environment and the Java runtime environment is maintained by the system administrator.
No action required for Airlock Gateway and IAM.
Details:
CVE-2021-29921, CVE-2020-28928
Affected JVM (Oracle GraalVM Enterprise Edition) not used by Airlock Gateway/IAM.
CVE-2021-2388
Does not affect Java deployments, typically in servers, that load and run only trusted code.
CVE-2021-2369
Affected component (JAR Signing) not used by Airlock Gateway/IAM.
CVE-2021-2432
Affected component (JNDI) not used by Airlock Gateway/IAM.
CVE-2021-2341
Affected component (FTP) not used by Airlock Gateway/IAM.
General Advice: We strongly recommend to update all client deployments of Java and uninstalling Java from clients where it is not needed.