What is RHSA-2022:5837?

RHSA-2022:5837 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: java-1.8.0-ibm security update

Which CVE IDs does RHSA-2022:5837 cover?

RHSA-2022:5837 covers the following CVE IDs: CVE-2021-35561, CVE-2021-41041, CVE-2022-21434, CVE-2022-21443, CVE-2022-21496. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:5837?

RHSA-2022:5837 has a CVSS v3 base score of 5.3, published by Red Hat Product Security.

RHSA-2022:5837MediumCVSS 5.3

Red Hat Security Advisory: java-1.8.0-ibm security update

Vendor

Red Hat Product Security

Published

August 2, 2022

Last Modified

June 26, 2026

🔗 CVE IDs covered (5)

CVE-2021-35561 →CVE-2021-41041 →CVE-2022-21434 →CVE-2022-21443 →CVE-2022-21496 →

📋 Description

CVE-2021-35561 — OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097) CVE-2021-41041 — java-11-openj9,java-1_8_0-openj9: unverified methods can be invoked using MethodHandles CVE-2022-21434 — OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) CVE-2022-21443 — OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) CVE-2022-21496 — OpenJDK: URI parsing inconsistencies (JNDI, 8278972)

🔗 References (7)

selfhttps://access.redhat.com/errata/RHSA-2022:5837
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2014524
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2075793
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2075836
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2075849
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5837.json