Red Hat Security Advisory

RHSA-2022:7001

java-17-openjdk security update

Released 2022-10-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.8.4) java-17-openjdk-1:17.0.5.0.8-2.el8_4, java-17-openjdk-demo-1:17.0.5.0.8-2.el8_4, java-17-openjdk-devel-1:17.0.5.0.8-2.el8_4 +6
Red Hat Enterprise Linux CRB EUS (v.8.4) java-17-openjdk-demo-fastdebug-1:17.0.5.0.8-2.el8_4, java-17-openjdk-demo-slowdebug-1:17.0.5.0.8-2.el8_4, java-17-openjdk-devel-fastdebug-1:17.0.5.0.8-2.el8_4 +11

TI-2022-06007 CVE-2022-21628 · GHSA-34g7-gffm-5gm5

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02879 Published 2022-10-18 Partial fix

TI-2022-06005 CVE-2022-21626 · GHSA-33pw-h52r-5vpg

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02433 Published 2022-10-18 Partial fix CWE-693

TI-2022-05997 CVE-2022-21618 · GHSA-wq9f-w2rj-j5wc

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02811 Published 2022-10-18 Partial fix CWE-287

TI-2022-05998 CVE-2022-21619 · GHSA-3ggq-p922-54qp

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03328 Published 2022-10-18 Partial fix CWE-284

TI-2022-18771 CVE-2022-39399 · GHSA-pvgf-45fp-3xpp

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02037 Published 2022-10-18 Partial fix CWE-284

TI-2022-06003 CVE-2022-21624 · GHSA-h547-5jph-p9qq

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01965 Published 2022-10-18 Partial fix CWE-502