Oracle Java SE und OpenJDK: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 18

• Medium 5.3
  CVE-2022-21271

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Solaris Operating System openjdk11 openjdk-9-jre Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21277

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

  Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21282

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21283

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21291

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). …

  Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21293

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21294

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21296

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21299

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Sup…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21305

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21340 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21341

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serializat…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21349

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Suppo…

  Oracle Java SE JDK and JRE openjdk-8 openjdk8 Ubuntu Alpine
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21360

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21365

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Medium 5.3
  CVE-2022-21366

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

  Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Low 3.7
  CVE-2022-21248

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serializat…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 19, 2022
• Unscored —
  CVE-2021-22959

  The parser in accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Re…

  Node.js node nodejs nodejs Debian Alpine
  Nov 15, 2021

Revision history

1. 2025-06-02 #47

   Neue Updates von XEROX aufgenommen

2. 2025-04-29 #46

   Neue Updates von Amazon aufgenommen

3. 2025-01-21 #45

   Neue Updates aufgenommen

4. 2024-11-21 #44

   Neue Updates von XEROX aufgenommen

5. 2024-10-14 #43

   Neue Updates aufgenommen

6. 2024-03-03 #42

   Neue Updates von XEROX aufgenommen

7. 2023-02-23 #41

   Neue Updates von Amazon aufgenommen

8. 2022-09-28 #40

   Neue Updates von IBM aufgenommen

9. 2022-09-14 #39

   Neue Updates von Amazon aufgenommen

10. 2022-09-12 #38

    Neue Updates von Amazon aufgenommen

11. 2022-09-06 #37

    Neue Updates von Gentoo aufgenommen

12. 2022-08-23 #36

    Neue Updates von Amazon aufgenommen

13. 2022-08-03 #35

    Neue Updates von SUSE aufgenommen

14. 2022-08-01 #34

    Neue Updates von BROCADE aufgenommen

15. 2022-07-24 #33

    Neue Updates von SUSE aufgenommen

16. 2022-07-21 #32

    Neue Updates von HCL aufgenommen

17. 2022-07-20 #31

    Neue Updates von Amazon aufgenommen

18. 2022-07-03 #30

    Neue Updates von NetApp aufgenommen

19. 2022-06-26 #29

    Neue Updates von BROCADE aufgenommen

20. 2022-06-19 #28

    Neue Updates von AVAYA aufgenommen

21. 2022-06-08 #27

    Neue Updates von Red Hat aufgenommen

22. 2022-06-06 #26

    Neue Updates von Red Hat aufgenommen

23. 2022-04-24 #25

    Neue Updates von Amazon aufgenommen

24. 2022-03-29 #24

    Neue Updates von Ubuntu und SUSE aufgenommen

25. 2022-03-24 #23

    Neue Updates von Red Hat aufgenommen

References

• Oracle Critical Patch Update Advisory - January 2022 - Appendix Oracle Java SE vom 2022-01-18
  https://www.oracle.com/security-alerts/cpujan2022.html#AppendixJAVA
• OpenJDK Vulnerability Advisory: 2022/01/18
  https://openjdk.java.net/groups/vulnerability/advisories/2022-01-18
• Oracle Linux Security Advisory ELSA-2022-0161 vom 2022-01-19
  http://linux.oracle.com/errata/ELSA-2022-0161.html
• Red Hat Security Advisory RHSA-2022:0161 vom 2022-01-19
  https://access.redhat.com/errata/RHSA-2022:0161
• Red Hat Security Advisory RHSA-2022:0209 vom 2022-01-24
  https://access.redhat.com/errata/RHSA-2022:0209
• Red Hat Security Advisory RHSA-2022:0211 vom 2022-01-24
  https://access.redhat.com/errata/RHSA-2022:0211
• Red Hat Security Advisory RHSA-2022:0204 vom 2022-01-24
  https://access.redhat.com/errata/RHSA-2022:0204
• Red Hat Security Advisory RHSA-2022:0233 vom 2022-01-24
  https://access.redhat.com/errata/RHSA-2022:0233
• Red Hat Security Advisory RHSA-2022:0185 vom 2022-01-24
  https://access.redhat.com/errata/RHSA-2022:0185
• Red Hat Security Advisory RHSA-2022:0166 vom 2022-01-24
  https://access.redhat.com/errata/RHSA-2022:0166
• Red Hat Security Advisory RHSA-2022:0165 vom 2022-01-24
  https://access.redhat.com/errata/RHSA-2022:0165
• Debian Security Advisory DSA-5057 vom 2022-01-24
  https://lists.debian.org/debian-security-announce/2022/msg00023.html
• Red Hat Security Advisory RHSA-2022:0228 vom 2022-01-24
  https://access.redhat.com/errata/RHSA-2022:0228
• Red Hat Security Advisory RHSA-2022:0229 vom 2022-01-24
  https://access.redhat.com/errata/RHSA-2022:0229
• Oracle Linux Security Advisory ELSA-2022-0185 vom 2022-01-24
  https://linux.oracle.com/errata/ELSA-2022-0185.html
• Oracle Linux Security Advisory ELSA-2022-0204 vom 2022-01-24
  https://linux.oracle.com/errata/ELSA-2022-0204.html
• Debian Security Advisory DSA-5058 vom 2022-01-25
  https://lists.debian.org/debian-security-announce/2022/msg00026.html
• CentOS Security Advisory CESA-2022:0204 vom 2022-01-25
  https://lists.centos.org/pipermail/centos-announce/2022-January/073550.html
• Red Hat Security Advisory RHSA-2022:0304 vom 2022-01-27
  https://access.redhat.com/errata/RHSA-2022:0304
• Red Hat Security Advisory RHSA-2022:0305 vom 2022-01-27
  https://access.redhat.com/errata/RHSA-2022:0305
• Red Hat Security Advisory RHSA-2022:0306 vom 2022-01-27
  https://access.redhat.com/errata/RHSA-2022:0306
• Red Hat Security Advisory RHSA-2022:0307 vom 2022-01-27
  https://access.redhat.com/errata/RHSA-2022:0307
• Red Hat Security Advisory RHSA-2022:0312 vom 2022-01-27
  https://access.redhat.com/errata/RHSA-2022:0312
• Red Hat Security Advisory RHSA-2022:0317 vom 2022-01-28
  https://access.redhat.com/errata/RHSA-2022:0317
• Red Hat Security Advisory RHSA-2022:0321 vom 2022-01-28
  https://access.redhat.com/errata/RHSA-2022:0321
• Oracle Linux Security Advisory ELSA-2022-0306 vom 2022-01-27
  https://linux.oracle.com/errata/ELSA-2022-0306.html
• Oracle Linux Security Advisory ELSA-2022-0307 vom 2022-01-27
  https://linux.oracle.com/errata/ELSA-2022-0307.html
• AVAYA Security Advisory ASA-2022-008 vom 2021-01-31
  https://downloads.avaya.com/css/P8/documents/101080371
• Red Hat Security Advisory RHSA-2022:0409 vom 2022-02-02
  https://access.redhat.com/errata/RHSA-2022:0409
• Red Hat Security Advisory RHSA-2022:0415 vom 2022-02-03
  https://access.redhat.com/errata/RHSA-2022:0415
• Red Hat Security Advisory RHSA-2022:0283 vom 2022-02-03
  https://access.redhat.com/errata/RHSA-2022:0283
• AVAYA Security Advisory ASA-2022-005 vom 2022-02-01
  https://downloads.avaya.com/css/P8/documents/101080372
• Hitachi Vulnerability Information HITACHI-SEC-2022-104 vom 2022-02-04
  https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2022-104/index.html
• Red Hat Security Advisory RHSA-2022:0444 vom 2022-02-08
  https://access.redhat.com/errata/RHSA-2022:0444
• Red Hat Security Advisory RHSA-2022:0445 vom 2022-02-08
  https://access.redhat.com/errata/RHSA-2022:0445
• Debian Security Advisory DLA-2917 vom 2022-02-10
  https://lists.debian.org/debian-lts-announce/2022/02/msg00011.html
• Amazon Linux Security Advisory ALAS-2022-1752 vom 2022-02-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1752.html
• Amazon Linux Security Advisory ALAS-2022-1753 vom 2022-02-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1753.html
• SUSE Security Update SUSE-SU-2022:0730-1 vom 2022-03-04
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010371.html
• Ubuntu Security Notice USN-5313-1 vom 2022-03-07
  https://ubuntu.com/security/notices/USN-5313-1
• Amazon Linux Security Advisory ALAS-2022-037 vom 2022-03-09
  https://alas.aws.amazon.com/AL2022/ALAS-2022-037.html
• SUSE Security Update SUSE-SU-2022:0816-1 vom 2022-03-14
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010427.html
• SUSE Security Update SUSE-SU-2022:0871-1 vom 2022-03-16
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010456.html
• SUSE Security Update SUSE-SU-2022:0873-1 vom 2022-03-16
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010457.html
• Red Hat Security Advisory RHSA-2022:0970 vom 2022-03-21
  https://access.redhat.com/errata/RHSA-2022:0970
• Red Hat Security Advisory RHSA-2022:0968 vom 2022-03-21
  https://access.redhat.com/errata/RHSA-2022:0968
• Red Hat Security Advisory RHSA-2022:0969 vom 2022-03-21
  https://access.redhat.com/errata/RHSA-2022:0969
• SUSE Security Update SUSE-SU-2022:14927-1 vom 2022-03-23
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010505.html
• SUSE Security Update SUSE-SU-2022:14926-1 vom 2022-03-23
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010503.html
• Red Hat Security Advisory RHSA-2022:1051 vom 2022-03-24
  https://access.redhat.com/errata/RHSA-2022:1051
• Ubuntu Security Notice USN-5313-2 vom 2022-03-29
  https://ubuntu.com/security/notices/USN-5313-2
• SUSE Security Update SUSE-SU-2022:1027-1 vom 2022-03-29
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010559.html
• SUSE Security Update SUSE-SU-2022:1026-1 vom 2022-03-29
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010556.html
• SUSE Security Update SUSE-SU-2022:1025-1 vom 2022-03-29
  https://lists.suse.com/pipermail/sle-security-updates/2022-March/010560.html
• Amazon Linux Security Advisory ALAS-2022-047 vom 2022-04-22
  https://alas.aws.amazon.com/AL2022/ALAS-2022-047.html
• Red Hat Security Advisory RHSA-2022:4918 vom 2022-06-06
  https://access.redhat.com/errata/RHSA-2022:4918
• Red Hat Security Advisory RHSA-2022:4919 vom 2022-06-06
  https://access.redhat.com/errata/RHSA-2022:4919
• Red Hat Security Advisory RHSA-2022:4922 vom 2022-06-06
  https://access.redhat.com/errata/RHSA-2022:4922
• Red Hat Security Advisory RHSA-2022:4957 vom 2022-06-09
  https://access.redhat.com/errata/RHSA-2022:4957
• AVAYA Security Advisory ASA-2022-018 vom 2022-06-19
  https://download.avaya.com/css/public/documents/101082272
• Brocade Security Advisory BSA-2022-1732 vom 2022-06-24
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1732
• Brocade Security Advisory BSA-2022-1980 vom 2022-06-24
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1980
• NetApp Security Advisory NTAP-20220121-0007 vom 2022-07-01
  https://security.netapp.com/advisory/ntap-20220121-0007/
• Amazon Linux Security Advisory ALAS-2022-1821 vom 2022-07-21
  https://alas.aws.amazon.com/AL2/ALAS-2022-1821.html
• HCL Article KB0099493 vom 2022-07-21
  https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099493
• SUSE Security Update SUSE-SU-2022:2540-1 vom 2022-07-23
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011646.html
• SUSE Security Update SUSE-SU-2022:2539-1 vom 2022-07-23
  https://lists.suse.com/pipermail/sle-security-updates/2022-July/011645.html
• Broadcom Security Advisory
  https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2019
• SUSE Security Update SUSE-SU-2022:2650-1 vom 2022-08-03
  https://lists.suse.com/pipermail/sle-security-updates/2022-August/011760.html
• Amazon Linux Security Advisory ALAS-2022-1631 vom 2022-08-23
  https://alas.aws.amazon.com/ALAS-2022-1631.html
• Gentoo Linux Security Advisory GLSA-202209-05 vom 2022-09-07
  https://security.gentoo.org/glsa/202209-05
• Amazon Linux Security Advisory ALAS-2022-1633 vom 2022-09-12
  https://alas.aws.amazon.com/ALAS-2022-1633.html
• Amazon Linux Security Advisory ALAS-2022-1835 vom 2022-09-15
  https://alas.aws.amazon.com/AL2/ALAS-2022-1835.html
• IBM Security Bulletin 6824779 vom 2022-09-29
  https://www.ibm.com/blogs/psirt/security-bulletin-txseries-for-multiplatforms-is-vulnerable-to-a-denial-of-service-exposure-due-to-ibm-sdk-java-technology-edition-2/
• Amazon Linux Security Advisory ALASJAVA-OPENJDK11-2023-003 vom 2023-02-23
  https://alas.aws.amazon.com/AL2/ALASJAVA-OPENJDK11-2023-003.html
• XEROX Security Advisory XRX24-005 vom 2024-03-04
  https://security.business.xerox.com/wp-content/uploads/2024/03/Xerox-Security-Bulletin-XRX24-005-Xerox-FreeFlow%C2%AE-Print-Server-v9_Feb-2024.pdf
• ### vom 2024-10-15
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24999
• XEROX Security Advisory XRX24-017 vom 2024-11-21
  https://securitydocs.business.xerox.com/wp-content/uploads/2024/11/Xerox-Security-Bulletin-XRX24-017-for-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf
• Change Log for Amazon Corretto 11 vom 2025-01-21
  https://github.com/corretto/corretto-11/blob/ece67a968d57210c69d3b9153576613846c1cacf/CHANGELOG.md
• Change Log for Amazon Corretto 8 vom 2025-01-21
  https://github.com/corretto/corretto-8/blob/14eb6b297ac476ca5734706b40903e5a69ecd74a/CHANGELOG.md