RHSA-2022:5696HighCVSS 7.5
Red Hat Security Advisory: java-1.8.0-openjdk security, bug fix, and enhancement update
🔗 CVE IDs covered (3)
📋 Description
CVE-2022-21540 — OpenJDK: class compilation issue (Hotspot, 8281859) CVE-2022-21541 — OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)
🎯 Affected products124
- Red Hat Enterprise Linux AppStream (v. 8)
- Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-1:1.8.0.342.b07-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-1:1.8.0.342.b07-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-1:1.8.0.342.b07-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-1:1.8.0.342.b07-2.el8_6.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-1:1.8.0.342.b07-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.342.b07-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.342.b07-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.342.b07-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.342.b07-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.342.b07-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.342.b07-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
- java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
- java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
- +94 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect.
🔗 References (10)
- selfhttps://access.redhat.com/errata/RHSA-2022:5696
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2084648
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2099911
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108540
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108543
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108554
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108564
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108566
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5696.json