Linux · Security advisory · April 25, 2022

RHSA-2022:1491: Security update for 20 packages

RHSA-2022:1491, released April 25, 2022, fixes 5 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0405
90th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
java-1.8.0-openjdkRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-accessibilityRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-accessibility-fastdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-accessibility-slowdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-demoRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-demo-fastdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-demo-slowdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-develRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-devel-fastdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-devel-slowdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-fastdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-headlessRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-headless-fastdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-headless-slowdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-javadocRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-javadoc-zipRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-slowdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-srcRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-src-fastdebugRHEL 81:1.8.0.332.b09-1.el8_5
java-1.8.0-openjdk-src-slowdebugRHEL 81:1.8.0.332.b09-1.el8_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-21476 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries) 7.5 0.0405 None reported
High CVE-2022-21426 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: JAXP) 7.5 0.0320 None reported
High CVE-2022-21496 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: JNDI) 7.5 0.0275 None reported
High CVE-2022-21443 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries) 7.5 0.0272 None reported
High CVE-2022-21434 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries) 7.5 0.0249 None reported
Showing 1 to 5 of 5 1