OpenJDK-7 Security Update
Summary
DLA-2193-1: openjdk-7 - security update. Affects openjdk-7 versions < 7u261-2.6.22-1~deb8u1. Fixed in 7u261-2.6.22-1~deb8u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenJDK is an open-source implementation of the Java Platform, Standard Edition (Java SE). It provides a runtime environment for executing Java applications and supports various platforms. OpenJDK-7 is a specific version of OpenJDK that is vulnerable to multiple security issues.
Vulnerability Detail
The OpenJDK-7 package is affected by several vulnerabilities, including denial of service, insecure TLS handshakes, bypass of sandbox restrictions, and HTTP response splitting attacks. These vulnerabilities can lead to various consequences such as system crashes, unauthorized access, and manipulation of HTTP responses.
How To Fix
Minimum fixed version
7u261-2.6.22-1~deb8u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade openjdk-7Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Upgrading the openjdk-7 package to the fixed version is crucial to ensure the security of the system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for openjdk-7 →
FAQ
OpenJDK is an open-source implementation of the Java Platform, Standard Edition (Java SE). It provides a runtime environment for executing Java applications.
The vulnerabilities in OpenJDK-7 include denial of service, insecure TLS handshakes, bypass of sandbox restrictions, and HTTP response splitting attacks.
These vulnerabilities can result in system crashes, unauthorized access, and manipulation of HTTP responses.
To fix these vulnerabilities, you need to upgrade the openjdk-7 package to version 7u261-2.6.22-1~deb8u1. Follow the instructions provided by Debian LTS security advisories for the upgrade process.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, on the Debian LTS wiki.
Related vulnerabilities
Recent vulnerabilities recorded for openjdk-7.
