What is RHSA-2022:5681?

RHSA-2022:5681 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: java-11-openjdk security and bug fix update

Which CVE IDs does RHSA-2022:5681 cover?

RHSA-2022:5681 covers the following CVE IDs: CVE-2022-21540, CVE-2022-21541, CVE-2022-34169. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:5681?

RHSA-2022:5681 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2022:5681?

RHSA-2022:5681 affects 124 products, including: Red Hat Enterprise Linux AppStream EUS (v.8.4); Red Hat Enterprise Linux CRB EUS (v.8.4); java-11-openjdk-1:11.0.16.0.8-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4); java-11-openjdk-1:11.0.16.0.8-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4); java-11-openjdk-1:11.0.16.0.8-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4); and others — see the full list on the advisory page.

RHSA-2022:5681HighCVSS 7.5

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Vendor

Red Hat Product Security

Published

July 21, 2022

Last Modified

August 4, 2026

🔗 CVE IDs covered (3)

CVE-2022-21540 →CVE-2022-21541 →CVE-2022-34169 →

📋 Description

CVE-2022-21540 — OpenJDK: class compilation issue (Hotspot, 8281859) CVE-2022-21541 — OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

🎯 Affected products124

Red Hat Enterprise Linux AppStream EUS (v.8.4)
Red Hat Enterprise Linux CRB EUS (v.8.4)
java-11-openjdk-1:11.0.16.0.8-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-1:11.0.16.0.8-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-1:11.0.16.0.8-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-1:11.0.16.0.8-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-1:11.0.16.0.8-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_4.s390x as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-11-openjdk-demo-1:11.0.16.0.8-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-demo-1:11.0.16.0.8-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-demo-1:11.0.16.0.8-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-demo-1:11.0.16.0.8-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-demo-fastdebug-1:11.0.16.0.8-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-11-openjdk-demo-slowdebug-1:11.0.16.0.8-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-11-openjdk-demo-slowdebug-1:11.0.16.0.8-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-11-openjdk-demo-slowdebug-1:11.0.16.0.8-1.el8_4.s390x as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-11-openjdk-demo-slowdebug-1:11.0.16.0.8-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-11-openjdk-devel-1:11.0.16.0.8-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-11-openjdk-devel-1:11.0.16.0.8-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
+94 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect.

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products124

✅ Remediation

🔗 References (10)