Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
OpenJDK Java Vulnerability in Red Hat Systems
published 2 years ago
Summary
A security issue has been discovered in the OpenJDK Java implementation used in Red Hat systems. This issue can allow an attacker to execute malicious code on a system, potentially leading to unauthorized access or data theft. To mitigate this risk, Red Hat has released an update to fix the issue, which should be applied as soon as possible.
What to do
- Update redhat java-11-openjdk to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-debuginfo to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-debugsource to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-demo to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-demo-fastdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-demo-slowdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-devel to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-devel-debuginfo to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-devel-fastdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-devel-fastdebug-debuginfo to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-devel-slowdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-devel-slowdebug-debuginfo to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-fastdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-fastdebug-debuginfo to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-headless to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-headless-debuginfo to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-headless-fastdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-headless-fastdebug-debuginfo to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-headless-slowdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-headless-slowdebug-debuginfo to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-javadoc to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-javadoc-zip to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-jmods to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-jmods-fastdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-jmods-slowdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-slowdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-slowdebug-debuginfo to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-src to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-src-fastdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-src-slowdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-static-libs to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-static-libs-fastdebug to version 1:11.0.16.0.8-1.el9_0.
- Update redhat java-11-openjdk-static-libs-slowdebug to version 1:11.0.16.0.8-1.el9_0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-debugsource |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-demo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-demo-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-demo-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-devel |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-devel-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-devel-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-devel-fastdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-devel-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-devel-slowdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-fastdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-headless |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-headless-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-headless-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-headless-fastdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-headless-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-headless-slowdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-javadoc |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-javadoc-zip |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-jmods |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-jmods-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-jmods-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-slowdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-src |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-src-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-src-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-static-libs |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-static-libs-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-11-openjdk-static-libs-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-debugsource |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-demo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-demo-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-demo-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-devel |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-devel-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-devel-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-devel-fastdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-devel-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-devel-slowdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-fastdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-headless |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-headless-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-headless-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
Showing 50 of 66. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-headless-fastdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-headless-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-headless-slowdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-javadoc |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-javadoc-zip |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-jmods |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-jmods-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-jmods-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-slowdebug-debuginfo |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-src |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-src-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-src-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-static-libs |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-static-libs-fastdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-11-openjdk-static-libs-slowdebug |
< 1:11.0.16.0.8-1.el9_0 Fix: upgrade to 1:11.0.16.0.8-1.el9_0
|
Original advisory text
Red Hat Security Advisory: java-11-openjdk security, bug fix, and enhancement update
References
- https://access.redhat.com/errata/RHSA-2022:5695 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2084777 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2099915 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2107866 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2107868 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2108540 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2108543 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2108554 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5695.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-21540 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21540 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21540 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-21541 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21541 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21541 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-34169 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-34169 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-34169 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published20 Sep 2024
Updated28 May 2026
First seen28 May 2026
Sources
RHSA-2022:5695 · OSV
Track software like this
Free during beta