First published: Tue Aug 02 2022(Updated: )
IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.<br>This update upgrades IBM Java SE 8 to version 8 SR7-FP10.<br>Security Fix(es):<br><li> OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097) (CVE-2021-35561)</li> <li> OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434)</li> <li> OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443)</li> <li> OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/java | <1.8.0-ibm-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-demo-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-demo-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-devel-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-devel-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-headless-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-headless-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-jdbc-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-jdbc-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-plugin-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-plugin-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-src-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-src-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-webstart-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-webstart-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-demo-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-demo-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-devel-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-devel-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-headless-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-headless-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-jdbc-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-jdbc-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-src-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-src-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-demo-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-demo-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-devel-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-devel-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-headless-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-headless-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-jdbc-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-jdbc-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-plugin-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-plugin-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-src-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-src-1.8.0.7.10-1.el8_6 |
redhat/java | <1.8.0-ibm-webstart-1.8.0.7.10-1.el8_6 | 1.8.0-ibm-webstart-1.8.0.7.10-1.el8_6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2022:5837 is categorized as important due to the risk of excessive memory allocation affecting performance.
To fix RHSA-2022:5837, you should upgrade IBM Java SE 8 to version 8 SR7-FP10 as specified in the advisory.
The affected software versions under RHSA-2022:5837 include multiple packages of IBM Java SE 1.8.0-ibm up to 1.8.0-7.10-1.el8_6.
RHSA-2022:5837 addresses excessive memory allocation vulnerabilities in HashMap and HashSet, identified by CVE-202-XXXX.
Yes, you need to upgrade to version 1.8.0-ibm-1.8.0.7.10-1.el8_6 or later to resolve RHSA-2022:5837.