Linux · Security advisory · August 2, 2022

RHSA-2022:5837: Security update for 8 packages

RHSA-2022:5837, released August 2, 2022, fixes 5 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0695
94th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 3 Routine 2

Fixed package versions

ProductReleaseFixed in
java-1.8.0-ibmRHEL 81:1.8.0.7.10-1.el8_6
java-1.8.0-ibm-demoRHEL 81:1.8.0.7.10-1.el8_6
java-1.8.0-ibm-develRHEL 81:1.8.0.7.10-1.el8_6
java-1.8.0-ibm-headlessRHEL 81:1.8.0.7.10-1.el8_6
java-1.8.0-ibm-jdbcRHEL 81:1.8.0.7.10-1.el8_6
java-1.8.0-ibm-pluginRHEL 81:1.8.0.7.10-1.el8_6
java-1.8.0-ibm-srcRHEL 81:1.8.0.7.10-1.el8_6
java-1.8.0-ibm-webstartRHEL 81:1.8.0.7.10-1.el8_6

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-21496 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: JNDI) 7.5 0.0275 None reported
High CVE-2022-21443 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries) 7.5 0.0272 None reported
High CVE-2022-21434 openjdk-11-demo: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Editionproduct of Oracle Java SE (component: Libraries) 7.5 0.0249 None reported
Routine CVE-2021-35561 java-17-openjdk-demo-slowdebug: The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Develop... 6.8 0.0695 None reported
Routine CVE-2021-41041 java-1.8.0-ibm: IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This upda... 5.3 0.0109 None reported
Showing 1 to 5 of 5 1