What is RHSA-2022:5726?

RHSA-2022:5726 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: java-17-openjdk security, bug fix, and enhancement update

Which CVE IDs does RHSA-2022:5726 cover?

RHSA-2022:5726 covers the following CVE IDs: CVE-2022-21540, CVE-2022-21541, CVE-2022-21549, CVE-2022-34169. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:5726?

RHSA-2022:5726 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2022:5726?

RHSA-2022:5726 affects 141 products, including: Red Hat Enterprise Linux AppStream (v. 8); Red Hat Enterprise Linux CRB (v. 8); java-17-openjdk-1:17.0.4.0.8-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8); java-17-openjdk-1:17.0.4.0.8-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8); java-17-openjdk-1:17.0.4.0.8-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8); and others — see the full list on the advisory page.

RHSA-2022:5726HighCVSS 7.5

Red Hat Security Advisory: java-17-openjdk security, bug fix, and enhancement update

Vendor

Red Hat Product Security

Published

July 26, 2022

Last Modified

August 4, 2026

🔗 CVE IDs covered (4)

CVE-2022-21540 →CVE-2022-21541 →CVE-2022-21549 →CVE-2022-34169 →

📋 Description

CVE-2022-21540 — OpenJDK: class compilation issue (Hotspot, 8281859) CVE-2022-21541 — OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) CVE-2022-21549 — OpenJDK: random exponentials issue (Libraries, 8283875) CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

🎯 Affected products141

Red Hat Enterprise Linux AppStream (v. 8)
Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-1:17.0.4.0.8-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-1:17.0.4.0.8-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-1:17.0.4.0.8-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-1:17.0.4.0.8-2.el8_6.src as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-1:17.0.4.0.8-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el8_6.s390x as a component of Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-demo-1:17.0.4.0.8-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-demo-1:17.0.4.0.8-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-demo-1:17.0.4.0.8-2.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-demo-1:17.0.4.0.8-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
java-17-openjdk-demo-fastdebug-1:17.0.4.0.8-2.el8_6.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-demo-fastdebug-1:17.0.4.0.8-2.el8_6.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8)
java-17-openjdk-demo-fastdebug-1:17.0.4.0.8-2.el8_6.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8)
+111 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect.

🔗 CVE IDs covered (4)

📋 Description

🎯 Affected products141

✅ Remediation

🔗 References (13)