Moderate: java-11-openjdk security and bug fix update
Summary
ALSA-2022:7012: Moderate: java-11-openjdk security and bug fix update. Affects java-11-openjdk versions < 1:11.0.17.0.8-2.el8_6. Fixed in 1:11.0.17.0.8-2.el8_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. These packages are used for running Java applications and developing Java software. OpenJDK is an open-source implementation of the Java Platform, Standard Edition (Java SE). It is widely used in various applications and platforms.
Vulnerability Detail
The vulnerability in the java-11-openjdk package is categorized as moderate. It includes several security fixes and bug fixes. The security fixes address various vulnerabilities that could potentially be exploited by attackers. These vulnerabilities include buffer overflow, excessive memory allocation, connection count limit, improper handling of long NTLM client hostnames, insufficient randomization of JNDI DNS port numbers, and missing SNI caching in HTTP/2. The impact of these vulnerabilities can range from remote code execution to information disclosure. It is important to update the java-11-openjdk package to the fixed version to mitigate these vulnerabilities.
How To Fix
Minimum fixed version
1:11.0.17.0.8-2.el8_6
This is the first release that contains the fix.
sudo dnf update java-11-openjdkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround is mentioned for this vulnerability. The recommended solution is to update the java-11-openjdk package to the fixed version.
Conclusion
The java-11-openjdk package has been found to have a moderate vulnerability. It is crucial to update the package to the fixed version to mitigate the security risks associated with the identified vulnerabilities. Regularly checking for updates and promptly applying them is essential to maintain a secure and stable Java environment. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for java-11-openjdk →
FAQ
java-11-openjdk is a package that provides the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. It is used for running Java applications and developing Java software.
The security fixes address vulnerabilities such as buffer overflow, excessive memory allocation, connection count limit, improper handling of long NTLM client hostnames, insufficient randomization of JNDI DNS port numbers, and missing SNI caching in HTTP/2.
The impact of these vulnerabilities can range from remote code execution to information disclosure.
To fix the vulnerability, update the java-11-openjdk package to version 11.0.17.0.8-2.el8_6 or later.
No specific workaround is mentioned for this vulnerability. The recommended solution is to update the java-11-openjdk package to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for java-11-openjdk.
