Red Hat Security Advisory

RHSA-2022:7008

java-11-openjdk security and bug fix update

Released 2022-10-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-11-openjdk-1:11.0.17.0.8-2.el7_9, java-11-openjdk-headless-1:11.0.17.0.8-2.el7_9
Red Hat Enterprise Linux Client Optional (v. 7) java-11-openjdk-demo-1:11.0.17.0.8-2.el7_9, java-11-openjdk-devel-1:11.0.17.0.8-2.el7_9, java-11-openjdk-javadoc-1:11.0.17.0.8-2.el7_9 +4
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-11-openjdk-demo-1:11.0.17.0.8-2.el7_9, java-11-openjdk-devel-1:11.0.17.0.8-2.el7_9, java-11-openjdk-javadoc-1:11.0.17.0.8-2.el7_9 +4
Red Hat Enterprise Linux Server (v. 7) java-11-openjdk-1:11.0.17.0.8-2.el7_9, java-11-openjdk-devel-1:11.0.17.0.8-2.el7_9, java-11-openjdk-headless-1:11.0.17.0.8-2.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) java-11-openjdk-demo-1:11.0.17.0.8-2.el7_9, java-11-openjdk-javadoc-1:11.0.17.0.8-2.el7_9, java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el7_9 +3
Red Hat Enterprise Linux Workstation (v. 7) java-11-openjdk-1:11.0.17.0.8-2.el7_9, java-11-openjdk-devel-1:11.0.17.0.8-2.el7_9, java-11-openjdk-headless-1:11.0.17.0.8-2.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) java-11-openjdk-demo-1:11.0.17.0.8-2.el7_9, java-11-openjdk-javadoc-1:11.0.17.0.8-2.el7_9, java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el7_9 +3

TI-2022-06007 CVE-2022-21628 · GHSA-34g7-gffm-5gm5

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02879 Published 2022-10-18 Partial fix

TI-2022-06005 CVE-2022-21626 · GHSA-33pw-h52r-5vpg

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02433 Published 2022-10-18 Partial fix CWE-693

TI-2022-05997 CVE-2022-21618 · GHSA-wq9f-w2rj-j5wc

LOW 35

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02811 Published 2022-10-18 Partial fix CWE-287

TI-2022-05998 CVE-2022-21619 · GHSA-3ggq-p922-54qp

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.03328 Published 2022-10-18 Partial fix CWE-284

TI-2022-18771 CVE-2022-39399 · GHSA-pvgf-45fp-3xpp

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.02037 Published 2022-10-18 Partial fix CWE-284

TI-2022-06003 CVE-2022-21624 · GHSA-h547-5jph-p9qq

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01965 Published 2022-10-18 Partial fix CWE-502