Red Hat Security AdvisoryRHSA-2022:5687
java-11-openjdk security, bug fix, and enhancement update
Released 2022-07-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) java-11-openjdk-1:11.0.16.0.8-1.el7_9, java-11-openjdk-headless-1:11.0.16.0.8-1.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) java-11-openjdk-demo-1:11.0.16.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.16.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.16.0.8-1.el7_9 +4
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-11-openjdk-demo-1:11.0.16.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.16.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.16.0.8-1.el7_9 +4
- Red Hat Enterprise Linux Server (v. 7) java-11-openjdk-1:11.0.16.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.16.0.8-1.el7_9, java-11-openjdk-headless-1:11.0.16.0.8-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) java-11-openjdk-demo-1:11.0.16.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.16.0.8-1.el7_9, java-11-openjdk-javadoc-zip-1:11.0.16.0.8-1.el7_9 +3
- Red Hat Enterprise Linux Workstation (v. 7) java-11-openjdk-1:11.0.16.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.16.0.8-1.el7_9, java-11-openjdk-headless-1:11.0.16.0.8-1.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) java-11-openjdk-demo-1:11.0.16.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.16.0.8-1.el7_9, java-11-openjdk-javadoc-zip-1:11.0.16.0.8-1.el7_9 +3
Fixes 3 records
Priority HIGH 79
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.81759 · Published 2022-07-19 · Partial fix · 2.7.3 CWE-681
Priority LOW 37
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.04167 · Published 2022-07-19 · Partial fix CWE-416
Priority LOW 34
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02882 · Published 2022-07-19 · Partial fix
