What is RHSA-2022:5697?

RHSA-2022:5697 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Which CVE IDs does RHSA-2022:5697 cover?

RHSA-2022:5697 covers the following CVE IDs: CVE-2022-21540, CVE-2022-21541, CVE-2022-34169. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:5697?

RHSA-2022:5697 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2022:5697?

RHSA-2022:5697 affects 108 products, including: Red Hat Enterprise Linux AppStream EUS (v.8.4); Red Hat Enterprise Linux CRB EUS (v.8.4); java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4); java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4); java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4); and others — see the full list on the advisory page.

RHSA-2022:5697HighCVSS 7.5

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Vendor

Red Hat Product Security

Published

July 25, 2022

Last Modified

August 4, 2026

🔗 CVE IDs covered (3)

CVE-2022-21540 →CVE-2022-21541 →CVE-2022-34169 →

📋 Description

CVE-2022-21540 — OpenJDK: class compilation issue (Hotspot, 8281859) CVE-2022-21541 — OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

🎯 Affected products108

Red Hat Enterprise Linux AppStream EUS (v.8.4)
Red Hat Enterprise Linux CRB EUS (v.8.4)
java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.342.b07-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.342.b07-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.342.b07-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.342.b07-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux CRB EUS (v.8.4)
java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
+78 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect.

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products108

✅ Remediation

🔗 References (10)