rhsa-2022_7010
Vulnerability from csaf_redhat
Published
2022-10-19 22:32
Modified
2024-12-16 00:42
Summary
Red Hat Security Advisory: java-11-openjdk security update
Notes
Topic
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.
Security Fix(es):
* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)
* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)
* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)
* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)
* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)
* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077) (CVE-2022-21618)\n\n* OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533) (CVE-2022-21626)\n\n* OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918) (CVE-2022-21628)\n\n* OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526) (CVE-2022-21619)\n\n* OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910) (CVE-2022-21624)\n\n* OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366) (CVE-2022-39399)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2022:7010", url: "https://access.redhat.com/errata/RHSA-2022:7010", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#moderate", url: "https://access.redhat.com/security/updates/classification/#moderate", }, { category: "external", summary: "2133745", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133745", }, { category: "external", summary: "2133753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133753", }, { category: "external", summary: "2133765", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133765", }, { category: "external", summary: "2133769", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133769", }, { category: "external", summary: "2133776", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133776", }, { category: "external", summary: "2133817", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133817", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7010.json", }, ], title: "Red Hat Security Advisory: java-11-openjdk security update", tracking: { current_release_date: "2024-12-16T00:42:40+00:00", generator: { date: "2024-12-16T00:42:40+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.3", }, }, id: "RHSA-2022:7010", initial_release_date: "2022-10-19T22:32:07+00:00", revision_history: [ { date: "2022-10-19T22:32:07+00:00", number: "1", summary: "Initial version", }, { date: "2022-10-19T22:32:07+00:00", number: "2", summary: "Last updated version", }, { date: "2024-12-16T00:42:40+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product: { name: "Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS", product_identification_helper: { cpe: "cpe:/a:redhat:rhel_eus:8.2::appstream", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", product: { name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", product_id: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk@11.0.17.0.8-2.el8_2?arch=src&epoch=1", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-demo@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-javadoc@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-javadoc-zip@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-jmods@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-src@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-static-libs@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-debugsource@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-debuginfo@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel-debuginfo@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless-debuginfo@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product: { name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_id: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=aarch64&epoch=1", }, }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-demo@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-javadoc@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-javadoc-zip@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-jmods@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-src@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-static-libs@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-debugsource@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-debuginfo@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel-debuginfo@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless-debuginfo@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product: { name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_id: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=ppc64le&epoch=1", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-demo@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-javadoc@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-javadoc-zip@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-jmods@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-src@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-static-libs@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-debugsource@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-debuginfo@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel-debuginfo@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless-debuginfo@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product: { name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_id: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=x86_64&epoch=1", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-demo@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-javadoc@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-javadoc-zip@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-jmods@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-src@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-static-libs@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-debugsource@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-debuginfo@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel-debuginfo@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-devel-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless-debuginfo@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-headless-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, { category: "product_version", name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product: { name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_id: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/java-11-openjdk-slowdebug-debuginfo@11.0.17.0.8-2.el8_2?arch=s390x&epoch=1", }, }, }, ], category: "architecture", name: "s390x", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", }, product_reference: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", }, product_reference: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", }, product_reference: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", }, product_reference: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, { category: "default_component_of", full_product_name: { name: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 8.2)", product_id: "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", }, product_reference: "java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", relates_to_product_reference: "AppStream-8.2.0.Z.EUS", }, ], }, vulnerabilities: [ { cve: "CVE-2022-21618", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, discovery_date: "2022-10-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2133817", }, ], notes: [ { category: "description", text: "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2022-21618", }, { category: "external", summary: "RHBZ#2133817", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133817", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2022-21618", url: "https://www.cve.org/CVERecord?id=CVE-2022-21618", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-21618", url: "https://nvd.nist.gov/vuln/detail/CVE-2022-21618", }, ], release_date: "2022-10-18T20:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2022-10-19T22:32:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of OpenJDK Java must be restarted for this update to take effect.", product_ids: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2022:7010", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.1", }, products: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077)", }, { cve: "CVE-2022-21619", cwe: { id: "CWE-192", name: "Integer Coercion Error", }, discovery_date: "2022-10-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2133745", }, ], notes: [ { category: "description", text: "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2022-21619", }, { category: "external", summary: "RHBZ#2133745", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133745", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2022-21619", url: "https://www.cve.org/CVERecord?id=CVE-2022-21619", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-21619", url: "https://nvd.nist.gov/vuln/detail/CVE-2022-21619", }, ], release_date: "2022-10-18T20:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2022-10-19T22:32:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of OpenJDK Java must be restarted for this update to take effect.", product_ids: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2022:7010", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 3.7, baseSeverity: "LOW", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.1", }, products: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)", }, { cve: "CVE-2022-21624", cwe: { id: "CWE-330", name: "Use of Insufficiently Random Values", }, discovery_date: "2022-10-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2133765", }, ], notes: [ { category: "description", text: "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2022-21624", }, { category: "external", summary: "RHBZ#2133765", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133765", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2022-21624", url: "https://www.cve.org/CVERecord?id=CVE-2022-21624", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-21624", url: "https://nvd.nist.gov/vuln/detail/CVE-2022-21624", }, ], release_date: "2022-10-18T20:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2022-10-19T22:32:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of OpenJDK Java must be restarted for this update to take effect.", product_ids: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2022:7010", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 3.7, baseSeverity: "LOW", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.1", }, products: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)", }, { cve: "CVE-2022-21626", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, discovery_date: "2022-10-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2133753", }, ], notes: [ { category: "description", text: "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2022-21626", }, { category: "external", summary: "RHBZ#2133753", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133753", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2022-21626", url: "https://www.cve.org/CVERecord?id=CVE-2022-21626", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-21626", url: "https://nvd.nist.gov/vuln/detail/CVE-2022-21626", }, ], release_date: "2022-10-18T20:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2022-10-19T22:32:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of OpenJDK Java must be restarted for this update to take effect.", product_ids: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2022:7010", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533)", }, { cve: "CVE-2022-21628", cwe: { id: "CWE-770", name: "Allocation of Resources Without Limits or Throttling", }, discovery_date: "2022-10-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2133769", }, ], notes: [ { category: "description", text: "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2022-21628", }, { category: "external", summary: "RHBZ#2133769", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133769", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2022-21628", url: "https://www.cve.org/CVERecord?id=CVE-2022-21628", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-21628", url: "https://nvd.nist.gov/vuln/detail/CVE-2022-21628", }, ], release_date: "2022-10-18T20:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2022-10-19T22:32:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of OpenJDK Java must be restarted for this update to take effect.", product_ids: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2022:7010", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918)", }, { cve: "CVE-2022-39399", cwe: { id: "CWE-290", name: "Authentication Bypass by Spoofing", }, discovery_date: "2022-10-06T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "2133776", }, ], notes: [ { category: "description", text: "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).", title: "Vulnerability description", }, { category: "summary", text: "OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2022-39399", }, { category: "external", summary: "RHBZ#2133776", url: "https://bugzilla.redhat.com/show_bug.cgi?id=2133776", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2022-39399", url: "https://www.cve.org/CVERecord?id=CVE-2022-39399", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-39399", url: "https://nvd.nist.gov/vuln/detail/CVE-2022-39399", }, ], release_date: "2022-10-18T20:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2022-10-19T22:32:07+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of OpenJDK Java must be restarted for this update to take effect.", product_ids: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2022:7010", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 3.7, baseSeverity: "LOW", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.1", }, products: [ "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.src", "AppStream-8.2.0.Z.EUS:java-11-openjdk-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-debugsource-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-demo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-devel-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-headless-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-javadoc-zip-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-jmods-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-slowdebug-debuginfo-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-src-1:11.0.17.0.8-2.el8_2.x86_64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.aarch64", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.ppc64le", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.s390x", "AppStream-8.2.0.Z.EUS:java-11-openjdk-static-libs-1:11.0.17.0.8-2.el8_2.x86_64", ], }, ], threats: [ { category: "impact", details: "Low", }, ], title: "OpenJDK: missing SNI caching in HTTP/2 (Networking, 8289366)", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.