Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
Oracle Java OpenJDK Security Update for Linux
published 2 years ago
Summary
This update addresses security vulnerabilities in the Oracle Java OpenJDK package, which could allow an attacker to execute arbitrary code or cause the application to crash. Affected systems should be updated to the latest version to prevent potential exploitation. Users should apply the update as soon as possible.
What to do
- Update redhat java-17-openjdk to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-debuginfo to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-debugsource to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-demo to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-demo-fastdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-demo-slowdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-devel to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-devel-debuginfo to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-devel-fastdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-devel-fastdebug-debuginfo to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-devel-slowdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-devel-slowdebug-debuginfo to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-fastdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-fastdebug-debuginfo to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-headless to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-headless-debuginfo to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-headless-fastdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-headless-fastdebug-debuginfo to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-headless-slowdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-headless-slowdebug-debuginfo to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-javadoc to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-javadoc-zip to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-jmods to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-jmods-fastdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-jmods-slowdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-slowdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-slowdebug-debuginfo to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-src to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-src-fastdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-src-slowdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-static-libs to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-static-libs-fastdebug to version 1:17.0.5.0.8-2.el9_0.
- Update redhat java-17-openjdk-static-libs-slowdebug to version 1:17.0.5.0.8-2.el9_0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-debugsource |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-demo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-demo-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-demo-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-devel |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-devel-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-devel-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-devel-fastdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-devel-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-devel-slowdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-fastdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-headless |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-headless-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-headless-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-headless-fastdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-headless-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-headless-slowdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-javadoc |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-javadoc-zip |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-jmods |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-jmods-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-jmods-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-slowdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-src |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-src-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-src-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-static-libs |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-static-libs-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::appstream | redhat | java-17-openjdk-static-libs-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-debugsource |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-demo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-demo-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-demo-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-devel |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-devel-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-devel-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-devel-fastdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-devel-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-devel-slowdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-fastdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-headless |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-headless-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-headless-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
Showing 50 of 66. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-headless-fastdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-headless-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-headless-slowdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-javadoc |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-javadoc-zip |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-jmods |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-jmods-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-jmods-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-slowdebug-debuginfo |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-src |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-src-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-src-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-static-libs |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-static-libs-fastdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
| Red Hat:enterprise_linux:9::crb | redhat | java-17-openjdk-static-libs-slowdebug |
< 1:17.0.5.0.8-2.el9_0 Fix: upgrade to 1:17.0.5.0.8-2.el9_0
|
Original advisory text
Red Hat Security Advisory: java-17-openjdk security and bug fix update
References
- https://access.redhat.com/errata/RHSA-2022:6999 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2132934 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2133745 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2133753 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2133765 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2133769 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2133776 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2133817 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6999.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-21618 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21618 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21618 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-21619 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21619 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21619 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-21624 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21624 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21624 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-21626 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21626 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21626 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-21628 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-21628 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-21628 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-33068 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2102608 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-33068 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-33068 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-39399 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-39399 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-39399 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published16 Sep 2024
Updated23 Mar 2026
First seen23 Mar 2026
Sources
RHSA-2022:6999 · OSV
Track software like this
Free during beta