What is the severity of RHSA-2022:1441?

RHSA-2022:1441 has been classified with a severity level of moderate due to multiple security vulnerabilities affecting OpenJDK.

How do I fix RHSA-2022:1441?

To fix RHSA-2022:1441, update to the package version 11-openjdk-11.0.15.0.9-2.el8_4 or later on your affected systems.

What vulnerabilities are addressed in RHSA-2022:1441?

RHSA-2022:1441 addresses CVE-2022-21476 among other vulnerabilities related to OpenJDK.

What platforms are affected by RHSA-2022:1441?

RHSA-2022:1441 affects multiple architectures, including x86_64 and ppc64le, across several OpenJDK packages.

Is there a detailed description of the vulnerabilities in RHSA-2022:1441?

Yes, RHSA-2022:1441 provides details on the defective secure validation in Apache Santuario and unbounded memory issues.

Vulnerability/
RHSA-2022:1441

20/4/2022

RHSA-2022:1441: Important: java-11-openjdk security update

First published: Wed Apr 20 2022(Updated: )

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.<br>Security Fix(es):<br><li> OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476)</li> <li> OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426)</li> <li> OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434)</li> <li> OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443)</li> <li> OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of RHSA-2022:1441?
RHSA-2022:1441 has been classified with a severity level of moderate due to multiple security vulnerabilities affecting OpenJDK.
How do I fix RHSA-2022:1441?
To fix RHSA-2022:1441, update to the package version 11-openjdk-11.0.15.0.9-2.el8_4 or later on your affected systems.
What vulnerabilities are addressed in RHSA-2022:1441?
RHSA-2022:1441 addresses CVE-2022-21476 among other vulnerabilities related to OpenJDK.
What platforms are affected by RHSA-2022:1441?
RHSA-2022:1441 affects multiple architectures, including x86_64 and ppc64le, across several OpenJDK packages.
Is there a detailed description of the vulnerabilities in RHSA-2022:1441?
Yes, RHSA-2022:1441 provides details on the defective secure validation in Apache Santuario and unbounded memory issues.

agent/severity
agent/type
agent/softwarecombine
agent/first-publish-date
agent/last-modified-date
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2022:1441
agent/software-canonical-lookup
agent/remedy
agent/references
agent/title
agent/description
agent/event
agent/trending
agent/tags
agent/source
package-manager/redhat