ALBA-2022:0887
java-11-openjdk bug fix and enhancement update
No scoreFix available
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.
Bug Fix(es):
- The previous OpenJDK 11 release, 11.0.14, was found to contain a regression introduced by improvements to the HTTP client. It caused both the :authority' and 'Host' header fields to be sent in HTTP/2 requests, which is rejected by some HTTP servers, such as Google's. With this update, the previous behaviour of only setting the ':authority' header is now used. (RH#2053174)
- Recent changes to the Lightweight Directory Access Protocol (LDAP) implementation in OpenJDK changed the behaviour when an authentication failure occurred. Instead of aborting immediately, all available LDAP servers would be tried with the same credentials. With this update, the previous behaviour of failure after the first authentication denial is restored. (RH#2055344)
What each source reports
OSV No score
java-11-openjdk bug fix and enhancement update
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.
Bug Fix(es):
- The previous OpenJDK 11 release, 11.0.14, was found to contain a regression introduced by improvements to the HTTP client. It caused both the :authority' and 'Host' header fields to be sent in HTTP/2 requests, which is rejected by some HTTP servers, such as Google's. With this update, the previous behaviour of only setting the ':authority' header is now used. (RH#2053174)
- Recent changes to the Lightweight Directory Access Protocol (LDAP) implementation in OpenJDK changed the behaviour when an authentication failure occurred. Instead of aborting immediately, all available LDAP servers would be tried with the same credentials. With this update, the previous behaviour of failure after the first authentication denial is restored. (RH#2055344)
- Record
ALBA-2022:0887- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-11-openjdkAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-demoAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-demo-fastdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-demo-slowdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-develAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-devel-fastdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-devel-slowdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-fastdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-headlessAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-headless-fastdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-11-openjdk-headless-slowdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-javadocAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-javadoc-zipAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-jmodsAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-jmods-fastdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-jmods-slowdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-slowdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-srcAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-src-fastdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-src-slowdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-static-libsAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-static-libs-fastdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
java-11-openjdk-static-libs-slowdebugAlmaLinux:8 |
before 1:11.0.14.1.1-2.el8_5 | 1:11.0.14.1.1-2.el8_5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
ALBA-2022:0887 is a vulnerability with no CVSS score yet in java-11-openjdk, published March 15, 2022. No source lists public exploit code. Fixed in java-11-openjdk 1:11.0.14.1.1-2.el8_5.