What is the severity of RHSA-2022:1729?

The severity of RHSA-2022:1729 is considered important due to the implications of improper ECDSA signature verification.

How do I fix RHSA-2022:1729?

To fix RHSA-2022:1729, update the java-17-openjdk packages to version 17-openjdk-17.0.3.0.7-1.el9_0.

What vulnerabilities are addressed in RHSA-2022:1729?

RHSA-2022:1729 addresses an improper ECDSA signature verification issue (CVE-2022-21449) and other defects in OpenJDK.

What software is affected by RHSA-2022:1729?

The affected software includes various packages of java-17-openjdk, including its runtime, development kit, and related components.

Is RHSA-2022:1729 applicable to all systems?

RHSA-2022:1729 is applicable to Red Hat Enterprise Linux 9 systems utilizing the OpenJDK 17.

Vulnerability/
RHSA-2022:1729

17/5/2022

31/8/2024

RHSA-2022:1729: Important: java-17-openjdk security update

First published: Tue May 17 2022(Updated: )

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.<br>Security Fix(es):<br><li> OpenJDK: Improper ECDSA signature verification (Libraries, 8277233) (CVE-2022-21449)</li> <li> OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476)</li> <li> OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426)</li> <li> OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434)</li> <li> OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443)</li> <li> OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Never miss a vulnerability like this again

Reference Links

https://access.redhat.com/errata/RHSA-2022:1729 (Advisory)

Frequently Asked Questions

What is the severity of RHSA-2022:1729?
The severity of RHSA-2022:1729 is considered important due to the implications of improper ECDSA signature verification.
How do I fix RHSA-2022:1729?
To fix RHSA-2022:1729, update the java-17-openjdk packages to version 17-openjdk-17.0.3.0.7-1.el9_0.
What vulnerabilities are addressed in RHSA-2022:1729?
RHSA-2022:1729 addresses an improper ECDSA signature verification issue (CVE-2022-21449) and other defects in OpenJDK.
What software is affected by RHSA-2022:1729?
The affected software includes various packages of java-17-openjdk, including its runtime, development kit, and related components.
Is RHSA-2022:1729 applicable to all systems?
RHSA-2022:1729 is applicable to Red Hat Enterprise Linux 9 systems utilizing the OpenJDK 17.

agent/severity
agent/type
agent/first-publish-date
agent/softwarecombine
agent/last-modified-date
agent/title
agent/description
agent/references
agent/tags
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2022:1729
agent/software-canonical-lookup
agent/remedy
agent/event
agent/source
package-manager/redhat