What security issues are addressed by RHSA-2022:1728?

RHSA-2022:1728 addresses a defective secure validation in Apache Santuario and potential unbounded memory allocation issues in OpenJDK.

What is the recommended version to upgrade to for RHSA-2022:1728?

The recommended version to upgrade to for resolving the vulnerabilities in RHSA-2022:1728 is 11-openjdk-11.0.15.0.10-1.el9_0 or equivalent packages.

How can I check if my system is affected by RHSA-2022:1728?

You can check for affected packages on your system by comparing the installed Java packages against those listed in RHSA-2022:1728.

What platforms does RHSA-2022:1728 impact?

RHSA-2022:1728 impacts various platforms including x86_64 and ppc64le architectures that are running the affected OpenJDK packages.

Is there a way to automate the update for the issues fixed in RHSA-2022:1728?

Yes, you can automate the update of affected packages for RHSA-2022:1728 using your package management system's update commands.

Vulnerability/
RHSA-2022:1728

17/5/2022

RHSA-2022:1728: Important: java-11-openjdk security update

First published: Tue May 17 2022(Updated: )

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.<br>Security Fix(es):<br><li> OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476)</li> <li> OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426)</li> <li> OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434)</li> <li> OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443)</li> <li> OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What security issues are addressed by RHSA-2022:1728?
RHSA-2022:1728 addresses a defective secure validation in Apache Santuario and potential unbounded memory allocation issues in OpenJDK.
What is the recommended version to upgrade to for RHSA-2022:1728?
The recommended version to upgrade to for resolving the vulnerabilities in RHSA-2022:1728 is 11-openjdk-11.0.15.0.10-1.el9_0 or equivalent packages.
How can I check if my system is affected by RHSA-2022:1728?
You can check for affected packages on your system by comparing the installed Java packages against those listed in RHSA-2022:1728.
What platforms does RHSA-2022:1728 impact?
RHSA-2022:1728 impacts various platforms including x86_64 and ppc64le architectures that are running the affected OpenJDK packages.
Is there a way to automate the update for the issues fixed in RHSA-2022:1728?
Yes, you can automate the update of affected packages for RHSA-2022:1728 using your package management system's update commands.

agent/type
agent/severity
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/title
agent/references
agent/remedy
agent/description
agent/event
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2022:1728
agent/software-canonical-lookup
agent/trending
agent/tags
agent/source
package-manager/redhat