Red Hat Security Advisory

RHSA-2022:1440

java-11-openjdk security, bug fix, and enhancement update

Released 2022-04-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-11-openjdk-1:11.0.15.0.9-2.el7_9, java-11-openjdk-headless-1:11.0.15.0.9-2.el7_9
Red Hat Enterprise Linux Client Optional (v. 7) java-11-openjdk-demo-1:11.0.15.0.9-2.el7_9, java-11-openjdk-devel-1:11.0.15.0.9-2.el7_9, java-11-openjdk-javadoc-1:11.0.15.0.9-2.el7_9 +4
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-11-openjdk-demo-1:11.0.15.0.9-2.el7_9, java-11-openjdk-devel-1:11.0.15.0.9-2.el7_9, java-11-openjdk-javadoc-1:11.0.15.0.9-2.el7_9 +4
Red Hat Enterprise Linux Server (v. 7) java-11-openjdk-1:11.0.15.0.9-2.el7_9, java-11-openjdk-devel-1:11.0.15.0.9-2.el7_9, java-11-openjdk-headless-1:11.0.15.0.9-2.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) java-11-openjdk-demo-1:11.0.15.0.9-2.el7_9, java-11-openjdk-javadoc-1:11.0.15.0.9-2.el7_9, java-11-openjdk-javadoc-zip-1:11.0.15.0.9-2.el7_9 +3
Red Hat Enterprise Linux Workstation (v. 7) java-11-openjdk-1:11.0.15.0.9-2.el7_9, java-11-openjdk-devel-1:11.0.15.0.9-2.el7_9, java-11-openjdk-headless-1:11.0.15.0.9-2.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) java-11-openjdk-demo-1:11.0.15.0.9-2.el7_9, java-11-openjdk-javadoc-1:11.0.15.0.9-2.el7_9, java-11-openjdk-javadoc-zip-1:11.0.15.0.9-2.el7_9 +3

TI-2022-05861 CVE-2022-21476 · GHSA-8w54-76vf-9qxj

MEDIUM 46

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04046 Published 2022-04-19 Partial fix CWE-284

TI-2022-05812 CVE-2022-21426 · GHSA-3g8v-2w9j-wwcx

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03177 Published 2022-04-19 Partial fix

TI-2022-05880 CVE-2022-21496 · GHSA-ph68-gfg8-7cjx

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02805 Published 2022-04-19 Partial fix

TI-2022-05819 CVE-2022-21434 · GHSA-3qf2-7xvh-j2fx

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02562 Published 2022-04-19 Partial fix

TI-2022-05828 CVE-2022-21443 · GHSA-gwg7-339c-3h88

LOW 23

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02729 Published 2022-04-19 Partial fix