Red Hat Security Advisory

RHSA-2022:5726

java-17-openjdk security, bug fix, and enhancement update

Released 2022-07-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) java-17-openjdk-1:17.0.4.0.8-2.el8_6, java-17-openjdk-demo-1:17.0.4.0.8-2.el8_6, java-17-openjdk-devel-1:17.0.4.0.8-2.el8_6 +6
Red Hat Enterprise Linux CRB (v. 8) java-17-openjdk-demo-fastdebug-1:17.0.4.0.8-2.el8_6, java-17-openjdk-demo-slowdebug-1:17.0.4.0.8-2.el8_6, java-17-openjdk-devel-fastdebug-1:17.0.4.0.8-2.el8_6 +11

TI-2022-15084 CVE-2022-34169 · GHSA-9339-86wc-4qgf

HIGH 79

The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.81759 Published 2022-07-19 Partial fix · 2.7.3 CWE-681

TI-2022-05920 CVE-2022-21540 · GHSA-975q-8v3h-8j23

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.04167 Published 2022-07-19 Partial fix CWE-416

TI-2022-05929 CVE-2022-21549 · GHSA-c786-7jf2-46w9

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02523 Published 2022-07-19 Fixed CWE-502

TI-2022-05921 CVE-2022-21541 · GHSA-vrhf-cc97-jx2x

LOW 34

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02882 Published 2022-07-19 Partial fix