Red Hat Security Advisory

RHSA-2022:1489

java-1.8.0-openjdk security update

Released 2022-04-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 8.2) java-1.8.0-openjdk-1:1.8.0.332.b09-1.el8_2, java-1.8.0-openjdk-accessibility-1:1.8.0.332.b09-1.el8_2, java-1.8.0-openjdk-demo-1:1.8.0.332.b09-1.el8_2 +5

TI-2022-05861 CVE-2022-21476 · GHSA-8w54-76vf-9qxj

MEDIUM 46

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04046 Published 2022-04-19 Partial fix CWE-284

TI-2022-05812 CVE-2022-21426 · GHSA-3g8v-2w9j-wwcx

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03177 Published 2022-04-19 Partial fix

TI-2022-05880 CVE-2022-21496 · GHSA-ph68-gfg8-7cjx

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02805 Published 2022-04-19 Partial fix

TI-2022-05819 CVE-2022-21434 · GHSA-3qf2-7xvh-j2fx

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02562 Published 2022-04-19 Partial fix

TI-2022-05828 CVE-2022-21443 · GHSA-gwg7-339c-3h88

LOW 23

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02729 Published 2022-04-19 Partial fix