What is RHSA-2022:5736?

RHSA-2022:5736 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: java-17-openjdk security, bug fix, and enhancement update

Which CVE IDs does RHSA-2022:5736 cover?

RHSA-2022:5736 covers the following CVE IDs: CVE-2022-21549, CVE-2022-34169, CVE-2022-21540, CVE-2022-21541. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:5736?

RHSA-2022:5736 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2022:5736?

RHSA-2022:5736 affects 141 products, including: Red Hat CodeReady Linux Builder (v. 9); Red Hat Enterprise Linux AppStream (v. 9); java-17-openjdk-1:17.0.4.0.8-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); java-17-openjdk-1:17.0.4.0.8-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); java-17-openjdk-1:17.0.4.0.8-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); and others — see the full list on the advisory page.

RHSA-2022:5736HighCVSS 7.5

Red Hat Security Advisory: java-17-openjdk security, bug fix, and enhancement update

Vendor

Red Hat Product Security

Published

July 27, 2022

Last Modified

August 4, 2026

🔗 CVE IDs covered (4)

CVE-2022-21549 →CVE-2022-34169 →CVE-2022-21540 →CVE-2022-21541 →

📋 Description

CVE-2022-21540 — OpenJDK: class compilation issue (Hotspot, 8281859) CVE-2022-21541 — OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) CVE-2022-21549 — OpenJDK: random exponentials issue (Libraries, 8283875) CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407)

🎯 Affected products141

Red Hat CodeReady Linux Builder (v. 9)
Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-1:17.0.4.0.8-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-1:17.0.4.0.8-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-1:17.0.4.0.8-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-1:17.0.4.0.8-2.el9_0.src as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-1:17.0.4.0.8-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el9_0.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)
java-17-openjdk-debuginfo-1:17.0.4.0.8-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el9_0.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el9_0.s390x as a component of Red Hat CodeReady Linux Builder (v. 9)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)
java-17-openjdk-debugsource-1:17.0.4.0.8-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-demo-1:17.0.4.0.8-2.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-demo-1:17.0.4.0.8-2.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-demo-1:17.0.4.0.8-2.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-demo-1:17.0.4.0.8-2.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
java-17-openjdk-demo-fastdebug-1:17.0.4.0.8-2.el9_0.aarch64 as a component of Red Hat CodeReady Linux Builder (v. 9)
java-17-openjdk-demo-fastdebug-1:17.0.4.0.8-2.el9_0.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9)
java-17-openjdk-demo-fastdebug-1:17.0.4.0.8-2.el9_0.x86_64 as a component of Red Hat CodeReady Linux Builder (v. 9)
+111 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect.

🔗 CVE IDs covered (4)

📋 Description

🎯 Affected products141

✅ Remediation

🔗 References (12)