Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/jre17-openjdk-headless@17.0.2-1
purl pkg:alpm/archlinux/jre17-openjdk-headless@17.0.2-1
Next non-vulnerable version 17.0.3.u7-2
Latest non-vulnerable version 17.0.3.u7-2
Risk 4.0
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-1d6t-ndfc-m7hg
Aliases:
CVE-2022-21443
OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)
17.0.3.u7-2
Affected by 0 other vulnerabilities.
VCID-a95g-84vs-xbav
Aliases:
CVE-2022-21476
OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)
17.0.3.u7-2
Affected by 0 other vulnerabilities.
VCID-hx4c-96gx-2fbq
Aliases:
CVE-2022-21426
OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)
17.0.3.u7-2
Affected by 0 other vulnerabilities.
VCID-kngz-x6mk-fqer
Aliases:
CVE-2022-21449
OpenJDK: Improper ECDSA signature verification (Libraries, 8277233)
17.0.3.u7-2
Affected by 0 other vulnerabilities.
VCID-y5qu-j3wt-wuej
Aliases:
CVE-2022-21496
OpenJDK: URI parsing inconsistencies (JNDI, 8278972)
17.0.3.u7-2
Affected by 0 other vulnerabilities.
VCID-zh9v-47ue-p7ep
Aliases:
CVE-2022-21434
OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)
17.0.3.u7-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:25:08.316276+00:00 Arch Linux Importer Affected by VCID-hx4c-96gx-2fbq https://security.archlinux.org/AVG-2687 38.0.0
2026-04-01T18:25:08.292301+00:00 Arch Linux Importer Affected by VCID-zh9v-47ue-p7ep https://security.archlinux.org/AVG-2687 38.0.0
2026-04-01T18:25:08.267575+00:00 Arch Linux Importer Affected by VCID-1d6t-ndfc-m7hg https://security.archlinux.org/AVG-2687 38.0.0
2026-04-01T18:25:08.242129+00:00 Arch Linux Importer Affected by VCID-kngz-x6mk-fqer https://security.archlinux.org/AVG-2687 38.0.0
2026-04-01T18:25:08.218181+00:00 Arch Linux Importer Affected by VCID-a95g-84vs-xbav https://security.archlinux.org/AVG-2687 38.0.0
2026-04-01T18:25:08.193436+00:00 Arch Linux Importer Affected by VCID-y5qu-j3wt-wuej https://security.archlinux.org/AVG-2687 38.0.0