Red Hat Security AdvisoryRHSA-2022:0307
java-1.8.0-openjdk security and bug fix update
Released 2022-01-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.322.b06-2.el8_5, java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.322.b06-2.el8_5, java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.322.b06-2.el8_5 +9
- Red Hat Enterprise Linux AppStream (v. 8) java-1.8.0-openjdk-1:1.8.0.322.b06-2.el8_5, java-1.8.0-openjdk-accessibility-1:1.8.0.322.b06-2.el8_5, java-1.8.0-openjdk-demo-1:1.8.0.322.b06-2.el8_5 +5
Fixes 12 records
Priority MEDIUM 57
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03765 · Published 2022-01-19 · Partial fix CWE-502
Priority MEDIUM 41
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.07748 · Published 2022-01-19 · Partial fix CWE-400
Priority MEDIUM 41
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.08346 · Published 2022-01-19 · Partial fix CWE-400
Priority LOW 37
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03782 · Published 2022-01-19 · Partial fix CWE-693
Priority LOW 36
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03486 · Published 2022-01-19 · Partial fix
Priority LOW 36
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03486 · Published 2022-01-19 · Partial fix CWE-400
Priority LOW 36
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03458 · Published 2022-01-19 · Partial fix CWE-400
Priority LOW 36
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0335 · Published 2022-01-19 · Partial fix CWE-770
Priority LOW 35
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02755 · Published 2022-01-19 · Partial fix CWE-284
Priority LOW 35
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02825 · Published 2022-01-19 · Partial fix CWE-200
Priority LOW 35
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02877 · Published 2022-01-19 · Partial fix CWE-611
Priority LOW 24
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03763 · Published 2022-01-19 · Partial fix