Red Hat Security Advisory

RHSA-2022:1729

java-17-openjdk security update

Released 2022-05-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) java-17-openjdk-demo-fastdebug-1:17.0.3.0.7-1.el9_0, java-17-openjdk-demo-slowdebug-1:17.0.3.0.7-1.el9_0, java-17-openjdk-devel-fastdebug-1:17.0.3.0.7-1.el9_0 +11
Red Hat Enterprise Linux AppStream (v. 9) java-17-openjdk-1:17.0.3.0.7-1.el9_0, java-17-openjdk-demo-1:17.0.3.0.7-1.el9_0, java-17-openjdk-devel-1:17.0.3.0.7-1.el9_0 +6

TI-2022-05834 CVE-2022-21449 · GHSA-cj8x-r9fp-q656

HIGH 78

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.77151 Published 2022-04-19 Fixed

TI-2022-05861 CVE-2022-21476 · GHSA-8w54-76vf-9qxj

MEDIUM 46

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04046 Published 2022-04-19 Partial fix CWE-284

TI-2022-05812 CVE-2022-21426 · GHSA-3g8v-2w9j-wwcx

LOW 36

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03177 Published 2022-04-19 Partial fix

TI-2022-05880 CVE-2022-21496 · GHSA-ph68-gfg8-7cjx

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02805 Published 2022-04-19 Partial fix

TI-2022-05819 CVE-2022-21434 · GHSA-3qf2-7xvh-j2fx

LOW 29

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02562 Published 2022-04-19 Partial fix

TI-2022-05828 CVE-2022-21443 · GHSA-gwg7-339c-3h88

LOW 23

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02729 Published 2022-04-19 Partial fix