CVE-2022-21449

1. corretto-17

   1 6 221 9.8 Java

   Amazon Corretto 17 is a no-cost, multi-platform, production-ready distribution of OpenJDK 17

   

   Amazon Coretto updated their changelog, mentioning CVE-2022-21449 on the 12th of April.

2. SaaSHub

   www.saashub.com featured

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

3. adoptium

   2 150 176 6.6

   

   My impression is that Adoptium / Temurin usually takes an extra week or two just because of their release process: https://github.com/adoptium/adoptium/issues/139

4. security-labs-pocs

   3 9 419 5.0 C

   Proof of concept code for Datadog Security Labs referenced exploits.

   

   Arch as well but the point about responsible disclosure is for the majority of users to have the patch before the vulnerability and POC are published. And I'd bet most Java web things are running on one of the unpatched builds (like Ubuntu with its 10 year LTS).

5. installer

   4 2 152 9.3 Java

   Installer scripts for Eclipse Temurin binaries (by adoptium)

   

   The move to the MS Build was purely because MS had apt repos out about 2 months before Adoptium got their sorted when they moved from Adopt to Adoptium. https://github.com/adoptium/installer/issues/330

Suggest a related project