Linux · Security advisory · June 30, 2022

ELSA-2022-1729: Security update for 23 packages

ELSA-2022-1729, released June 30, 2022, fixes 6 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.7715
99th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
java-17-openjdkol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-demool 91:17.0.3.0.7-1.el9_0
java-17-openjdk-demo-fastdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-demo-slowdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-develol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-devel-fastdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-devel-slowdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-fastdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-headlessol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-headless-fastdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-headless-slowdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-javadocol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-javadoc-zipol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-jmodsol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-jmods-fastdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-jmods-slowdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-slowdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-srcol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-src-fastdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-src-slowdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-static-libsol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-static-libs-fastdebugol 91:17.0.3.0.7-1.el9_0
java-17-openjdk-static-libs-slowdebugol 91:17.0.3.0.7-1.el9_0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-21449 java-17-openjdk-static-libs-fastdebug: The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Develop... 7.5 0.7715 None reported
High CVE-2022-21476 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries) 7.5 0.0405 None reported
High CVE-2022-21426 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: JAXP) 7.5 0.0320 None reported
High CVE-2022-21496 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: JNDI) 7.5 0.0275 None reported
High CVE-2022-21443 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries) 7.5 0.0272 None reported
High CVE-2022-21434 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries) 7.5 0.0249 None reported
Showing 1 to 6 of 6 1