Red Hat Security Advisory

RHSA-2022:7002

java-1.8.0-openjdk security and bug fix update

Released 2022-10-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-1.8.0-openjdk-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.352.b08-2.el7_9
Red Hat Enterprise Linux Client Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.352.b08-2.el7_9 +3
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.352.b08-2.el7_9 +3
Red Hat Enterprise Linux Server (v. 7) java-1.8.0-openjdk-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.352.b08-2.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.352.b08-2.el7_9 +2
Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-openjdk-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.352.b08-2.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.352.b08-2.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.352.b08-2.el7_9 +2

TI-2022-06007 CVE-2022-21628 · GHSA-34g7-gffm-5gm5

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02879 Published 2022-10-18 Partial fix

TI-2022-06005 CVE-2022-21626 · GHSA-33pw-h52r-5vpg

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02433 Published 2022-10-18 Partial fix CWE-693

TI-2022-05998 CVE-2022-21619 · GHSA-3ggq-p922-54qp

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03328 Published 2022-10-18 Partial fix CWE-284

TI-2022-06003 CVE-2022-21624 · GHSA-h547-5jph-p9qq

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01965 Published 2022-10-18 Partial fix CWE-502