RHSA-2022:5700HighCVSS 7.5
Red Hat Security Advisory: java-1.8.0-openjdk security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2022-21540 — OpenJDK: class compilation issue (Hotspot, 8281859) CVE-2022-21541 — OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)
🎯 Affected products60
- Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_2.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-1:1.8.0.342.b07-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-accessibility-1:1.8.0.342.b07-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-1.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-1.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-1.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-debuginfo-1:1.8.0.342.b07-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-debugsource-1:1.8.0.342.b07-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-1:1.8.0.342.b07-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-debuginfo-1:1.8.0.342.b07-1.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-debuginfo-1:1.8.0.342.b07-1.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-debuginfo-1:1.8.0.342.b07-1.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-debuginfo-1:1.8.0.342.b07-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-slowdebug-debuginfo-1:1.8.0.342.b07-1.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-slowdebug-debuginfo-1:1.8.0.342.b07-1.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-demo-slowdebug-debuginfo-1:1.8.0.342.b07-1.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- java-1.8.0-openjdk-devel-1:1.8.0.342.b07-1.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)
- +30 more not shown
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect.
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2022:5700
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108540
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108543
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2108554
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5700.json