What security issues are addressed in RHSA-2022:1489?

RHSA-2022:1489 addresses a defect in secure validation in Apache Santuario, leading to potential security vulnerabilities.

How do I fix RHSA-2022:1489?

To fix RHSA-2022:1489, update to the latest version of the java-1.8.0-openjdk packages provided by Red Hat.

What versions of OpenJDK are affected by RHSA-2022:1489?

RHSA-2022:1489 affects OpenJDK version 1.8.0-openjdk up to and including 1.8.0.332.b09-1.el8_2.

Is RHSA-2022:1489 related to any known vulnerabilities?

Yes, RHSA-2022:1489 is related to CVE-2022-21476, which highlights a security weakness in OpenJDK.

What is the recommended action if I am using affected versions of OpenJDK addressed in RHSA-2022:1489?

Users of affected versions should prioritize applying the necessary updates as outlined in RHSA-2022:1489.

Vulnerability/
RHSA-2022:1489

25/4/2022

20/6/2024

RHSA-2022:1489: Important: java-1.8.0-openjdk security update

First published: Mon Apr 25 2022(Updated: )

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.<br>Security Fix(es):<br><li> OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476)</li> <li> OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426)</li> <li> OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434)</li> <li> OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443)</li> <li> OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Never miss a vulnerability like this again

Reference Links

https://access.redhat.com/errata/RHSA-2022:1489 (Advisory)

Frequently Asked Questions

What security issues are addressed in RHSA-2022:1489?
RHSA-2022:1489 addresses a defect in secure validation in Apache Santuario, leading to potential security vulnerabilities.
How do I fix RHSA-2022:1489?
To fix RHSA-2022:1489, update to the latest version of the java-1.8.0-openjdk packages provided by Red Hat.
What versions of OpenJDK are affected by RHSA-2022:1489?
RHSA-2022:1489 affects OpenJDK version 1.8.0-openjdk up to and including 1.8.0.332.b09-1.el8_2.
Is RHSA-2022:1489 related to any known vulnerabilities?
Yes, RHSA-2022:1489 is related to CVE-2022-21476, which highlights a security weakness in OpenJDK.
What is the recommended action if I am using affected versions of OpenJDK addressed in RHSA-2022:1489?
Users of affected versions should prioritize applying the necessary updates as outlined in RHSA-2022:1489.

agent/type
agent/severity
agent/softwarecombine
agent/last-modified-date
agent/first-publish-date
agent/title
agent/description
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2022:1489
agent/software-canonical-lookup
agent/remedy
agent/references
agent/tags
agent/event
agent/source
package-manager/redhat