Vulnerability in java-11-openjdk package
Summary
ALBA-2021:3890: java-11-openjdk bug fix and enhancement update. Affects java-11-openjdk versions < 1:11.0.13.0.8-3.el8_5. Fixed in 1:11.0.13.0.8-3.el8_5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The java-11-openjdk package provides the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. It is widely used for developing and running Java applications. The package includes various components such as the Java Development Kit (JDK), Java Runtime Environment (JRE), and Java Virtual Machine (JVM).
Vulnerability Detail
The vulnerability in the java-11-openjdk package is related to a bug fix and enhancement update. The specific details of the bug fix and enhancement are not provided in the vulnerability report. However, it is mentioned that the update includes the Oracle CPU 2021-10. The impact of this vulnerability is not specified, but it is recommended to update to the fixed version to ensure the latest security patches and improvements are applied.
How To Fix
Minimum fixed version
1:11.0.13.0.8-3.el8_5
This is the first release that contains the fix.
sudo dnf update java-11-openjdk
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the java-11-openjdk package has a vulnerability that can be fixed by updating to version 1:11.0.13.0.8-3.el8_5 or later. It is recommended to update the package to ensure the latest security patches and improvements are applied. For more information and support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for java-11-openjdk →
FAQ
The impact of this vulnerability is not specified in the vulnerability report. However, it is recommended to update to the fixed version to ensure the latest security patches and improvements are applied.
You can update the java-11-openjdk package by using the package manager of the AlmaLinux 8 operating system. For example, you can run the following command:
sudo yum update java-11-openjdk
No workaround is mentioned in the vulnerability report. It is recommended to update to the fixed version.
You can find more information about this vulnerability in the AlmaLinux 8 advisory ALBA-2021:3890. The advisory provides details about the bug fix and enhancement update.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
Related vulnerabilities
Recent vulnerabilities recorded for java-11-openjdk.