Red Hat Security Advisory

RHSA-2022:1445

java-17-openjdk security and bug fix update

Released 2022-04-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) java-17-openjdk-demo-fastdebug-1:17.0.3.0.6-2.el8_5, java-17-openjdk-demo-slowdebug-1:17.0.3.0.6-2.el8_5, java-17-openjdk-devel-fastdebug-1:17.0.3.0.6-2.el8_5 +11
Red Hat Enterprise Linux AppStream (v. 8) java-17-openjdk-1:17.0.3.0.6-2.el8_5, java-17-openjdk-demo-1:17.0.3.0.6-2.el8_5, java-17-openjdk-devel-1:17.0.3.0.6-2.el8_5 +6

TI-2022-05834 CVE-2022-21449 · GHSA-cj8x-r9fp-q656

HIGH 78

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.77151 Published 2022-04-19 Fixed

TI-2022-05861 CVE-2022-21476 · GHSA-8w54-76vf-9qxj

MEDIUM 46

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04046 Published 2022-04-19 Partial fix CWE-284

TI-2022-05812 CVE-2022-21426 · GHSA-3g8v-2w9j-wwcx

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03177 Published 2022-04-19 Partial fix

TI-2022-05880 CVE-2022-21496 · GHSA-ph68-gfg8-7cjx

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02805 Published 2022-04-19 Partial fix

TI-2022-05819 CVE-2022-21434 · GHSA-3qf2-7xvh-j2fx

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02562 Published 2022-04-19 Partial fix

TI-2022-05828 CVE-2022-21443 · GHSA-gwg7-339c-3h88

LOW 23

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02729 Published 2022-04-19 Partial fix