RHSA-2022:5698HighCVSS 7.5
Red Hat Security Advisory: java-1.8.0-openjdk security, bug fix, and enhancement update
🔗 CVE IDs covered (3)
📋 Description
CVE-2022-21540 — OpenJDK: class compilation issue (Hotspot, 8281859) CVE-2022-21541 — OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)
🎯 Affected products100
- Red Hat Enterprise Linux Client (v. 7)
- Red Hat Enterprise Linux Client Optional (v. 7)
- Red Hat Enterprise Linux ComputeNode Optional (v. 7)
- Red Hat Enterprise Linux Server (v. 7)
- Red Hat Enterprise Linux Server Optional (v. 7)
- Red Hat Enterprise Linux Workstation (v. 7)
- Red Hat Enterprise Linux Workstation Optional (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)
- +70 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect.
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2022:5698
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2083257
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108540
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108543
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108554
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5698.json