RHSA-2022:5683HighCVSS 7.5

Red Hat Security Advisory: java-11-openjdk security, bug fix, and enhancement update

Published
July 21, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2022-21540 →CVE-2022-21541 →CVE-2022-34169 →

📋 Description

CVE-2022-21540 — OpenJDK: class compilation issue (Hotspot, 8281859) CVE-2022-21541 — OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

🎯 Affected products141

  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-1:11.0.16.0.8-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-1:11.0.16.0.8-1.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-1:11.0.16.0.8-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-1:11.0.16.0.8-1.el8_6.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-1:11.0.16.0.8-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_6.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-debuginfo-1:11.0.16.0.8-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_6.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-debugsource-1:11.0.16.0.8-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-demo-1:11.0.16.0.8-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-demo-1:11.0.16.0.8-1.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-demo-1:11.0.16.0.8-1.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-demo-1:11.0.16.0.8-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • java-11-openjdk-demo-fastdebug-1:11.0.16.0.8-1.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-demo-fastdebug-1:11.0.16.0.8-1.el8_6.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
  • java-11-openjdk-demo-fastdebug-1:11.0.16.0.8-1.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
  • +111 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect.

🔗 References (10)