Red Hat Security AdvisoryRHSA-2022:5698
java-1.8.0-openjdk security, bug fix, and enhancement update
Released 2022-07-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.342.b07-1.el7_9
- Red Hat Enterprise Linux Client Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.342.b07-1.el7_9 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.342.b07-1.el7_9 +3
- Red Hat Enterprise Linux Server (v. 7) java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.342.b07-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.342.b07-1.el7_9 +2
- Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.342.b07-1.el7_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.342.b07-1.el7_9 +2
Fixes 3 records
Priority HIGH 79
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.81759 · Published 2022-07-19 · Partial fix · 2.7.3 CWE-681
Priority LOW 37
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.04167 · Published 2022-07-19 · Partial fix CWE-416
Priority LOW 34
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02882 · Published 2022-07-19 · Partial fix
