Red Hat Security Advisory

RHSA-2022:7007

java-1.8.0-openjdk security update

Released 2022-10-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.352.b08-2.el9_0, java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.352.b08-2.el9_0, java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.352.b08-2.el9_0 +7
Red Hat Enterprise Linux AppStream (v. 9) java-1.8.0-openjdk-1:1.8.0.352.b08-2.el9_0, java-1.8.0-openjdk-demo-1:1.8.0.352.b08-2.el9_0, java-1.8.0-openjdk-devel-1:1.8.0.352.b08-2.el9_0 +4

TI-2022-06007 CVE-2022-21628 · GHSA-34g7-gffm-5gm5

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02879 Published 2022-10-18 Partial fix

TI-2022-06005 CVE-2022-21626 · GHSA-33pw-h52r-5vpg

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02433 Published 2022-10-18 Partial fix CWE-693

TI-2022-05998 CVE-2022-21619 · GHSA-3ggq-p922-54qp

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03328 Published 2022-10-18 Partial fix CWE-284

TI-2022-06003 CVE-2022-21624 · GHSA-h547-5jph-p9qq

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01965 Published 2022-10-18 Partial fix CWE-502