Moderate: java-17-openjdk security and bug fix update
Summary
ALSA-2022:6999: Moderate: java-17-openjdk security and bug fix update. Affects java-17-openjdk versions < 1:17.0.5.0.8-2.el9_0. Fixed in 1:17.0.5.0.8-2.el9_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. These packages are used for running Java applications and developing Java software. OpenJDK is an open-source implementation of the Java Platform, Standard Edition (Java SE). It is widely used in various applications and platforms.
Vulnerability Detail
This vulnerability affects the java-17-openjdk package and is categorized as moderate. It includes multiple security fixes and bug fixes. The security fixes address various vulnerabilities that could potentially lead to buffer overflow, excessive memory allocation, improper handling of long NTLM client hostnames, insufficient randomization of JNDI DNS port numbers, and missing SNI caching in HTTP/2. These vulnerabilities could be exploited by attackers to execute arbitrary code, cause denial of service, or gain unauthorized access to sensitive information. The bug fixes aim to improve the stability and performance of the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.
How To Fix
Minimum fixed version
1:17.0.5.0.8-2.el9_0
This is the first release that contains the fix.
sudo dnf update java-17-openjdkTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The java-17-openjdk package is vulnerable to multiple security issues and bugs. It is recommended to update the package to version 17.0.5.0.8-2.el9_0 or later to mitigate these vulnerabilities. Updating the package will ensure that the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit are secure and stable. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for java-17-openjdk →
FAQ
OpenJDK is an open-source implementation of the Java Platform, Standard Edition (Java SE). It provides a Java Runtime Environment (JRE) and a Java Software Development Kit (SDK) for running Java applications and developing Java software.
The security fixes address vulnerabilities related to buffer overflow, excessive memory allocation, improper handling of long NTLM client hostnames, insufficient randomization of JNDI DNS port numbers, and missing SNI caching in HTTP/2. These vulnerabilities could be exploited by attackers to execute arbitrary code, cause denial of service, or gain unauthorized access to sensitive information.
To update the java-17-openjdk package, you can use the package management system of your operating system. Detailed instructions on how to update the package can be found in the documentation or support resources provided by the operating system or package maintainers.
No specific workarounds have been mentioned for this vulnerability. It is recommended to update the java-17-openjdk package to the latest version to address the identified vulnerabilities.
More information about the security fixes and bug fixes included in this update can be found in the CVE pages listed in the References section of the vulnerability details. These pages provide details about the impact, CVSS score, acknowledgments, and other related information for each security issue.
Related vulnerabilities
Recent vulnerabilities recorded for java-17-openjdk.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
