RHSA-2022:1492: Important: OpenJDK 8u332 Windows builds release and security update
The OpenJDK 8 packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.This release of the Red Hat build of OpenJDK 8 (8u332) for Windows serves as a replacement for the Red Hat build of OpenJDK 8 (8u322) and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.Security Fix(es): OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504) (CVE-2022-21426) OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) (CVE-2022-21443) OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672) (CVE-2022-21434) OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) (CVE-2022-21476) OpenJDK: URI parsing inconsistencies (JNDI, 8278972) (CVE-2022-21496) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:1492?
RHSA-2022:1492 has a severity level classified as important due to the potential risk it poses to security.
How do I fix RHSA-2022:1492?
To resolve RHSA-2022:1492, you should update to the latest Red Hat OpenJDK 8 packages provided in this advisory.
What is the impact of ignoring RHSA-2022:1492?
Ignoring RHSA-2022:1492 could leave your system vulnerable to exploits that may impact confidentiality, integrity, or availability.
Which versions of OpenJDK are affected by RHSA-2022:1492?
RHSA-2022:1492 affects the Red Hat build of OpenJDK 8 prior to version 8u332.
When was RHSA-2022:1492 released?
RHSA-2022:1492 was released as an advisory on a date specified by Red Hat related to security updates.