Vulnerability in java-11-openjdk package

Summary

18/05/2021
N/A
Yes i
Unrated
Not published

ALBA-2021:1984: java-11-openjdk bug fix and enhancement update. Affects java-11-openjdk-demo-fastdebug versions < 1:11.0.11.0.9-2.el8_4. Fixed in 1:11.0.11.0.9-2.el8_4. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Sponsored Devnack Penetration testing for web, API and mobile Manual testing by engineers who build software, not an auditor's checklist. Trusted by teams at Swift and Google Talk to Devnack

Background

The java-11-openjdk package provides the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. It is widely used for developing and running Java applications. The package is vulnerable to a bug that has been fixed in the latest update.

Vulnerability Detail

The vulnerability in the java-11-openjdk package is related to a bug that has been identified and fixed in the latest update. The bug could potentially lead to security vulnerabilities or performance issues in Java applications running on systems with the vulnerable package installed. It is important to update to the latest version to mitigate the risk of exploitation.

How To Fix

Minimum fixed version

1:11.0.11.0.9-2.el8_4

This is the first release that contains the fix.

sudo dnf update java-11-openjdk-demo-fastdebug

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Workaround

No workaround has been provided for this vulnerability. It is recommended to update the package to the latest version as soon as possible.

Conclusion

The java-11-openjdk package is vulnerable to a bug that has been fixed in the latest update. It is crucial to update the package to the latest version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for java-11-openjdk-demo-fastdebug →

Share this vulnerability

FAQ

The vulnerability could potentially lead to security vulnerabilities or performance issues in Java applications running on systems with the vulnerable package installed.

You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will analyze it for any open-source vulnerabilities, including this one.

No workaround has been provided for this vulnerability. It is recommended to update the package to the latest version as soon as possible.

The latest update for the java-11-openjdk package can be obtained from the official package repository or by using package management tools.

For further support on vulnerability remediation, you can reach out to info@devnack.com.

Related vulnerabilities

Recent vulnerabilities recorded for java-11-openjdk-demo-fastdebug.

How To Fix

Minimum fixed version

1:11.0.11.0.9-2.el8_4

This is the first release that contains the fix.

sudo dnf update java-11-openjdk-demo-fastdebug

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback