CVE-2024-20918

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

7.4 HighFix available

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: None

Exploit likelihood

0.92%Up 0.8 points since Jan 24, 2024

What each source reports

CVE List Score used 7.4

Record: CVE-2024-20918
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-284
Updated: 2026-11-02

EUVDEUVD-2024-18633 7.4

Record: EUVD-2024-18633
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-45pc-2866-5hxx 7.4

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...

Record: GHSA-45pc-2866-5hxx
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-284
Updated: 2026-11-02

NVD 7.4

Record: CVE-2024-20918
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness: CWE-284
Updated: 2026-11-02

OSVALPINE-CVE-2024-20918 7.4

Record: ALPINE-CVE-2024-20918
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-03

OSVBELL-CVE-2024-20918 7.4

Record: BELL-CVE-2024-20918
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

Show 48 moreShow less

OSV 7.4

Record: CVE-2024-20918
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-20918 7.4

Record: DEBIAN-CVE-2024-20918
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1099 7.4

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)

Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator).(CVE-2024-20945)

Record: OESA-2024-1099
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1127 7.4

openjdk-1.8.0 security update

Security Fix(es):

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service.(CVE-2024-20919)

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security.(CVE-2024-20921)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for…

Record: OESA-2024-1127
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1149 7.4

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security.(CVE-2024-20921)

Record: OESA-2024-1149
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1150 7.4

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security.(CVE-2024-20921)

Record: OESA-2024-1150
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1152 7.4

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security.(CVE-2024-20921)

Record: OESA-2024-1152
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1153 7.4

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security.(CVE-2024-20921)

Record: OESA-2024-1153
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1154 7.4

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security.(CVE-2024-20921)

Record: OESA-2024-1154
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1684 7.5

openjdk-17 security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and 22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base…

Record: OESA-2024-1684
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1685 7.5

openjdk-17 security update

The OpenJDK runtime environment.

Security Fix(es):

Record: OESA-2024-1685
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1686 7.5

openjdk-17 security update

The OpenJDK runtime environment.

Security Fix(es):

Record: OESA-2024-1686
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-1687 7.5

openjdk-17 security update

The OpenJDK runtime environment.

Security Fix(es):

Record: OESA-2024-1687
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVOESA-2024-2485 8.8

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)

Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)

Vulnerability in the Java SE,…

Record: OESA-2024-2485
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2486 8.8

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Java SE,…

Record: OESA-2024-2486
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2487 8.8

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Java SE,…

Record: OESA-2024-2487
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2488 8.8

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Java SE,…

Record: OESA-2024-2488
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2489 8.8

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Java SE,…

Record: OESA-2024-2489
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:0223 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2024:0223
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0224 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2024:0224
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0225 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2024:0225
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0226 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2024:0226
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0228 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2024:0228
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0232 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2024:0232
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0233 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2024:0233
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0234 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2024:0234
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0235 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2024:0235
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0237 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2024:0237
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0241 7.5

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2024:0241
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0242 7.5

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2024:0242
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0244 7.5

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2024:0244
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0248 7.4

Red Hat Security Advisory: java-21-openjdk security update

Record: RHSA-2024:0248
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0249 7.4

Red Hat Security Advisory: java-21-openjdk security update

Record: RHSA-2024:0249
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0265 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2024:0265
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0266 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2024:0266
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:0267 7.5

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2024:0267
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:1481 7.4

Red Hat Security Advisory: java-1.8.0-ibm security update

Record: RHSA-2024:1481
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2024:1482 7.4

Red Hat Security Advisory: java-1.8.0-ibm security update

Record: RHSA-2024:1482
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-20918 7.4

Record: UBUNTU-CVE-2024-20918
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVALSA-2024:0248 No score

Important: java-21-openjdk security update

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:0248
Updated: 2026-11-02

OSVALSA-2024:0249 No score

Important: java-21-openjdk security update

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:0249
Updated: 2026-11-02

OSVALSA-2024:0265 No score

Important: java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926)
OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

In the previous release in October 2023 (8u392), the RPMs on AlmaLinux 8 were changed to use Provides for java, jre, java-headless, jre-headless, java-devel and java-sdk which included the full RPM version. This prevented the Provides being used to resolve a dependency on Java 1.8.0 (for example, "Requires: java-headless 1:1.8.0"). This change has now been reverted to the old "1:1.8.0" value. (AlmaLinux-19636, AlmaLinux-19637)

Record: ALSA-2024:0265
Updated: 2026-11-02

OSVALSA-2024:0266 No score

Important: java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
OpenJDK: arbitrary Java code execution in Nashorn (8314284) (CVE-2024-20926)
OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:0266
Updated: 2026-11-02

OSVALSA-2024:0267 No score

Important: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

OpenJDK: array out-of-bounds access due to missing range check in C1 compiler (8314468) (CVE-2024-20918)
OpenJDK: incorrect handling of ZIP files with duplicate entries (8276123) (CVE-2024-20932)
OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) (CVE-2024-20952)
OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295) (CVE-2024-20919)
OpenJDK: range check loop optimization issue (8314307) (CVE-2024-20921)
OpenJDK: logging of digital signature private keys (8316976) (CVE-2024-20945)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

When Transparent Huge Pages (THP) are unconditionally enabled on a system, Java applications using many threads were found to have a large Resident Set Size (RSS). This was due to a race between the kernel transforming thread stack memory into huge pages and the Java Virtual Machine (JVM) shattering these pages into smaller ones when adding a guard page. This release resolves this issue by getting glibc to insert a guard page and prevent the creation of huge pages. (AlmaLinux-13930, AlmaLinux-13931, AlmaLinux-13934, AlmaLinux-13935)

Record: ALSA-2024:0267
Updated: 2026-11-02

OSVBIT-java-2024-20918 No score

Record: BIT-java-2024-20918
Updated: 2026-11-02

OSVBIT-java-min-2024-20918 No score

Record: BIT-java-min-2024-20918
Updated: 2026-11-02

OSVBIT-jre-2024-20918 No score

Record: BIT-jre-2024-20918
Updated: 2026-11-02

OSVCLSA-2024-1706696494 No score

java-1.8.0-openjdk: Fix of 8 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u402-b06. That fixes following CVEs:
CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler
CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution
CVE-2024-20921: Range check loop optimization issue
CVE-2024-20926: Arbitrary Java code execution in Nashorn
CVE-2024-20945: Logging of digital signature private keys
CVE-2024-20952: RSA padding issue and timing side-channel attack against TLS
CVE-2023-22067: IOR deserialization issue in CORBA (fixed in jdk8u392)
CVE-2023-22081: Certificate path validation issue during client authentication (fixed in jdk8u392)
Adapt pr2462 patch to the new sources

Record: CLSA-2024-1706696494
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`openjdk11` Alpine:v3.16	before 11.0.22_p7-r0	11.0.22_p7-r0
`openjdk11` Alpine:v3.17	before 11.0.22_p7-r0	11.0.22_p7-r0
`openjdk11` Alpine:v3.18	before 11.0.22_p7-r0	11.0.22_p7-r0
`openjdk11` Alpine:v3.19	before 11.0.22_p7-r0	11.0.22_p7-r0
`openjdk11` Alpine:v3.20	before 11.0.22_p7-r0	11.0.22_p7-r0
`openjdk11` Alpine:v3.21	before 11.0.22_p7-r0	11.0.22_p7-r0
`openjdk11` Alpine:v3.22	before 11.0.22_p7-r0	11.0.22_p7-r0
`openjdk11` Alpine:v3.23	before 11.0.22_p7-r0	11.0.22_p7-r0
`openjdk11` Alpine:v3.24	before 11.0.22_p7-r0	11.0.22_p7-r0
`openjdk17` Alpine:v3.16	before 17.0.10_p7-r0	17.0.10_p7-r0

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`openjdk17` Alpine:v3.17	before 17.0.10_p7-r0	17.0.10_p7-r0
`openjdk17` Alpine:v3.18	before 17.0.10_p7-r0	17.0.10_p7-r0
`openjdk17` Alpine:v3.19	before 17.0.10_p7-r0	17.0.10_p7-r0
`openjdk17` Alpine:v3.20	before 17.0.10_p7-r0	17.0.10_p7-r0
`openjdk17` Alpine:v3.21	before 17.0.10_p7-r0	17.0.10_p7-r0
`openjdk17` Alpine:v3.22	before 17.0.10_p7-r0	17.0.10_p7-r0
`openjdk17` Alpine:v3.23	before 17.0.10_p7-r0	17.0.10_p7-r0
`openjdk17` Alpine:v3.24	before 17.0.10_p7-r0	17.0.10_p7-r0
`openjdk21` Alpine:v3.19	before 21.0.2_p13-r0	21.0.2_p13-r0
`openjdk21` Alpine:v3.20	before 21.0.2_p13-r0	21.0.2_p13-r0
`openjdk21` Alpine:v3.21	before 21.0.2_p13-r0	21.0.2_p13-r0
`openjdk21` Alpine:v3.22	before 21.0.2_p13-r0	21.0.2_p13-r0
`openjdk21` Alpine:v3.23	before 21.0.2_p13-r0	21.0.2_p13-r0
`openjdk21` Alpine:v3.24	before 21.0.2_p13-r0	21.0.2_p13-r0
`openjdk8` Alpine:v3.18	before 8.402.06-r0	8.402.06-r0
`openjdk8` Alpine:v3.19	before 8.402.06-r0	8.402.06-r0
`openjdk8` Alpine:v3.20	before 8.402.06-r0	8.402.06-r0
`openjdk8` Alpine:v3.21	before 8.402.06-r0	8.402.06-r0
`openjdk8` Alpine:v3.22	before 8.402.06-r0	8.402.06-r0
`openjdk8` Alpine:v3.23	before 8.402.06-r0	8.402.06-r0
`openjdk8` Alpine:v3.24	before 8.402.06-r0	8.402.06-r0
`java-21-openjdk` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-demo` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-demo-fastdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-demo-slowdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-devel` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-devel-fastdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-devel-slowdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-fastdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-headless` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-headless-fastdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-headless-slowdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-javadoc` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-javadoc-zip` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-jmods` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-jmods-fastdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-jmods-slowdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-slowdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-src` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-src-fastdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-src-slowdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-static-libs` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-static-libs-fastdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk-static-libs-slowdebug` AlmaLinux:8 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el8.alma.1	1:21.0.2.0.13-1.el8.alma.1
`java-21-openjdk` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-demo` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-devel` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-headless` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-javadoc` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-jmods` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`java-21-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 5 CVEs	before 1:21.0.2.0.13-1.el9.alma.1	1:21.0.2.0.13-1.el9.alma.1
`openjdk11` Alpaquita:23	11.0.19_p7-r0 up to 11.0.22_p12-r0	11.0.22_p12-r0
`openjdk11-container-jre` Alpaquita:23	11.0.19_p7-r0 up to 11.0.22_p12-r0	11.0.22_p12-r0
`openjdk11-jvmci` Alpaquita:23	11.0.19_p7-r0 up to 11.0.22_p12-r0	11.0.22_p12-r0
`openjdk11-lite` Alpaquita:23	11.0.19_p7-r1 up to 11.0.22_p12-r1	11.0.22_p12-r1
`openjdk17` Alpaquita:23	17.0.7_p7-r1 up to 17.0.10_p13-r0	17.0.10_p13-r0
`openjdk17-container-jre` Alpaquita:23	17.0.7_p7-r0 up to 17.0.10_p13-r0	17.0.10_p13-r0
`openjdk17-lite` Alpaquita:23	17.0.7_p7-r1 up to 17.0.10_p13-r0	17.0.10_p13-r0
`openjdk21` Alpaquita:23	21_p37-r0 up to 21.0.2_p14-r0	21.0.2_p14-r0
`openjdk21-container-jre` Alpaquita:23	21_p37-r0 up to 21.0.2_p14-r0	21.0.2_p14-r0
`openjdk21-lite` Alpaquita:23	21_p37-r0 up to 21.0.2_p14-r0	21.0.2_p14-r0
`openjdk8` Alpaquita:23	8u372_p7-r0 up to 8u402_p7-r0	8u402_p7-r0
`openjdk11` Alpaquita:stream	11.0.19_p7-r0 up to 11.0.22_p12-r0	11.0.22_p12-r0
`openjdk11-container-jre` Alpaquita:stream	11.0.19_p7-r0 up to 11.0.22_p12-r0	11.0.22_p12-r0
`openjdk11-jvmci` Alpaquita:stream	11.0.19_p7-r0 up to 11.0.22_p12-r0	11.0.22_p12-r0
`openjdk11-lite` Alpaquita:stream	11.0.19_p7-r1 up to 11.0.22_p12-r1	11.0.22_p12-r1
`openjdk17` Alpaquita:stream	17.0.7_p7-r1 up to 17.0.10_p13-r0	17.0.10_p13-r0
`openjdk17-container-jre` Alpaquita:stream	17.0.7_p7-r0 up to 17.0.10_p13-r0	17.0.10_p13-r0
`openjdk17-lite` Alpaquita:stream	17.0.8_p7-r0 up to 17.0.10_p13-r0	17.0.10_p13-r0
`openjdk21` Alpaquita:stream	21_p37-r0 up to 21.0.2_p14-r0	21.0.2_p14-r0
`openjdk21-container-jre` Alpaquita:stream	21_p37-r0 up to 21.0.2_p14-r0	21.0.2_p14-r0
`openjdk21-lite` Alpaquita:stream	21_p37-r0 up to 21.0.2_p14-r0	21.0.2_p14-r0
`openjdk8` Alpaquita:stream	8u372_p7-r1 up to 8u402_p7-r0	8u402_p7-r0
`openjdk11-container-jre` BellSoft Hardened Containers:23	11.0.19_p7-r0 up to 11.0.22_p12-r0	11.0.22_p12-r0
`openjdk11-lite` BellSoft Hardened Containers:23	11.0.19_p7-r1 up to 11.0.22_p12-r1	11.0.22_p12-r1
`openjdk17-container-jre` BellSoft Hardened Containers:23	17.0.7_p7-r0 up to 17.0.10_p13-r0	17.0.10_p13-r0
`openjdk17-lite` BellSoft Hardened Containers:23	17.0.7_p7-r1 up to 17.0.10_p13-r0	17.0.10_p13-r0
`openjdk21-container-jre` BellSoft Hardened Containers:23	21_p37-r0 up to 21.0.2_p14-r0	21.0.2_p14-r0
`openjdk21-lite` BellSoft Hardened Containers:23	21_p37-r0 up to 21.0.2_p14-r0	21.0.2_p14-r0
`openjdk8` BellSoft Hardened Containers:23	8u372_p7-r0 up to 8u402_p7-r0	8u402_p7-r0
`openjdk11-container-jre` BellSoft Hardened Containers:stream	11.0.19_p7-r0 up to 11.0.22_p12-r0	11.0.22_p12-r0
`openjdk11-lite` BellSoft Hardened Containers:stream	11.0.19_p7-r1 up to 11.0.22_p12-r1	11.0.22_p12-r1
`openjdk17-container-jre` BellSoft Hardened Containers:stream	17.0.7_p7-r0 up to 17.0.10_p13-r0	17.0.10_p13-r0
`openjdk17-lite` BellSoft Hardened Containers:stream	17.0.8_p7-r0 up to 17.0.10_p13-r0	17.0.10_p13-r0
`openjdk21-container-jre` BellSoft Hardened Containers:stream	21_p37-r0 up to 21.0.2_p14-r0	21.0.2_p14-r0
`openjdk21-lite` BellSoft Hardened Containers:stream	21_p37-r0 up to 21.0.2_p14-r0	21.0.2_p14-r0
`openjdk8` BellSoft Hardened Containers:stream	8u372_p7-r1 up to 8u402_p7-r0	8u402_p7-r0
`java` Bitnami	before 1.8.0, 1.9.0 up to 8.0.401, 9.0.0 up to 11.0.22, 12.0.0 up to 17.0.10, 18.0.0 up to 21.0.2	1.8.08.0.40111.0.2217.0.1021.0.2
`java-min` Bitnami	before 1.8.0, 1.9.0 up to 8.0.401, 9.0.0 up to 11.0.22, 12.0.0 up to 17.0.10, 18.0.0 up to 21.0.2	1.8.08.0.40111.0.2217.0.1021.0.2
`jre` Bitnami	before 1.8.0, 1.9.0 up to 8.0.401, 9.0.0 up to 11.0.22, 12.0.0 up to 17.0.10, 18.0.0 up to 21.0.2	1.8.08.0.40111.0.2217.0.1021.0.2
`java-1.8.0-openjdk` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc-zip` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc-zip` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src` TuxCare:CentOS:8.5 From an advisory covering 8 CVEs	before 1:1.8.0.402.b06-1.el8.tuxcare.els1	1:1.8.0.402.b06-1.el8.tuxcare.els1
`openjdk-17` Debian:12	before 17.0.10+7-1~deb12u1, plus listed versions 17.0.10+7-1~deb11u117.0.10~6ea-117.0.6+10-117.0.7+7-117.0.7+7-1~deb11u1 Show 15 moreShow less 17.0.7+7-1~deb12u117.0.7+7-217.0.8+7-117.0.8+7-1~deb12u117.0.8~6-117.0.8~6-217.0.8~6-317.0.8~6-417.0.8~6-517.0.9+9-117.0.9+9-1~deb11u117.0.9+9-1~deb12u117.0.9+9-217.0.9~4ea-117.0.9~6ea-1	17.0.10+7-1~deb12u1
`openjdk-21` Debian:13	before 21.0.2+13-1	21.0.2+13-1
`openjdk-21` Debian:14	before 21.0.2+13-1	21.0.2+13-1
`openjdk-11` Debian:10 From an advisory covering 6 CVEs	before 11.0.22+7-1~deb10u1, plus listed versions 11.0.10+8-111.0.10+9-111.0.11+3-111.0.11+3-211.0.11+3-3 Show 45 moreShow less 11.0.11+4-111.0.11+7-111.0.11+8-111.0.11+9-111.0.11+9-1~deb10u111.0.12+4-111.0.12+6-111.0.12+7-111.0.12+7-211.0.12+7-2~deb10u111.0.13+8-111.0.13+8-1~deb10u111.0.13+8-1~deb11u111.0.14+9-111.0.14+9-1~deb10u111.0.14+9-1~deb11u111.0.14.1+1-111.0.15+10-111.0.15+10-1~deb10u111.0.15+10-1~deb11u111.0.16+8-111.0.16+8-1~deb10u111.0.16+8-1~deb11u111.0.17+8-111.0.17+8-211.0.18+10-111.0.18+10-1~deb10u111.0.18+10-1~deb11u111.0.19+7+really11.0.11+9-1+b211.0.19+7-111.0.20+8-111.0.20+8-1~deb10u111.0.20+8-1~deb11u111.0.20~7-111.0.21+9-111.0.21+9-1~deb10u111.0.21+9-1~deb11u111.0.21~4ea-111.0.22~6ea-111.0.3+7-511.0.4+1-111.0.4+10-111.0.4+11-111.0.4+11-1~bpo9+111.0.4+11-1~deb10u1	11.0.22+7-1~deb10u1
`openjdk-11` Debian:11 From an advisory covering 6 CVEs	before 11.0.22+7-1~deb11u1, plus listed versions 11.0.12+7-211.0.13+8-111.0.13+8-1~deb10u111.0.13+8-1~deb11u111.0.14+9-1 Show 26 moreShow less 11.0.14+9-1~deb10u111.0.14+9-1~deb11u111.0.14.1+1-111.0.15+10-111.0.15+10-1~deb10u111.0.15+10-1~deb11u111.0.16+8-111.0.16+8-1~deb10u111.0.16+8-1~deb11u111.0.17+8-111.0.17+8-211.0.18+10-111.0.18+10-1~deb10u111.0.18+10-1~deb11u111.0.19+7+really11.0.11+9-1+b211.0.19+7-111.0.20+8-111.0.20+8-1~deb10u111.0.20+8-1~deb11u111.0.20~7-111.0.21+9-111.0.21+9-1~deb10u111.0.21+9-1~deb11u111.0.21~4ea-111.0.22+7-1~deb10u111.0.22~6ea-1	11.0.22+7-1~deb11u1
`openjdk-17` Debian:11 From an advisory covering 7 CVEs	before 17.0.10+7-1~deb11u1, plus listed versions 17+35-117.0.1+12-117.0.1+12-1+deb11u117.0.1+12-1+deb11u217.0.10~6ea-1 Show 34 moreShow less 17.0.2+8-117.0.2+8-1~deb11u117.0.3+7-117.0.3+7-1~deb11u117.0.4+8-117.0.4+8-1~deb11u117.0.5+8-117.0.5+8-217.0.6+10-117.0.6+10-1~deb11u117.0.7+7-117.0.7+7-1~deb11u117.0.7+7-1~deb12u117.0.7+7-217.0.8+7-117.0.8+7-1~deb12u117.0.8~6-117.0.8~6-217.0.8~6-317.0.8~6-417.0.8~6-517.0.9+9-117.0.9+9-1~deb11u117.0.9+9-1~deb12u117.0.9+9-217.0.9~4ea-117.0.9~6ea-117~19-117~24-117~27-117~29-117~31ea-117~33ea-117~35ea-1	17.0.10+7-1~deb11u1
`openjdk-17` Debian:12 From an advisory covering 7 CVEs	before 17.0.10+7-1~deb12u1, plus listed versions 17.0.10+7-1~deb11u117.0.10~6ea-117.0.6+10-117.0.7+7-117.0.7+7-1~deb11u1 Show 15 moreShow less 17.0.7+7-1~deb12u117.0.7+7-217.0.8+7-117.0.8+7-1~deb12u117.0.8~6-117.0.8~6-217.0.8~6-317.0.8~6-417.0.8~6-517.0.9+9-117.0.9+9-1~deb11u117.0.9+9-1~deb12u117.0.9+9-217.0.9~4ea-117.0.9~6ea-1	17.0.10+7-1~deb12u1
`java-17-openjdk` Mageia:9 From an advisory covering 8 CVEs	before 17.0.10.0.7-1.mga9	17.0.10.0.7-1.mga9
`java-11-openjdk` Mageia:9 From an advisory covering 6 CVEs	before 11.0.22.0.7-1.mga9	11.0.22.0.7-1.mga9
`java-1.8.0-openjdk` Mageia:9 From an advisory covering 6 CVEs	before 1.8.0.402.b06-1.mga9	1.8.0.402.b06-1.mga9
`java-latest-openjdk` Mageia:9 From an advisory covering 6 CVEs	before 21.0.2.0.13-1.rolling.1.mga9	21.0.2.0.13-1.rolling.1.mga9
`openjdk-11` openEuler:22.03-LTS From an advisory covering 4 CVEs	before java-11-openjdk-11.0.22.7-0.oe2203	java-11-openjdk-11.0.22.7-0.oe2203
`openjdk-1.8.0` openEuler:20.03-LTS-SP1 From an advisory covering 9 CVEs	before java-1.8.0-openjdk-1.8.0.402.b06-0.oe1	java-1.8.0-openjdk-1.8.0.402.b06-0.oe1
`openjdk-1.8.0` openEuler:20.03-LTS-SP4 From an advisory covering 9 CVEs	before java-1.8.0-openjdk-1.8.0.402.b06-0.oe2003sp4	java-1.8.0-openjdk-1.8.0.402.b06-0.oe2003sp4
`openjdk-1.8.0` openEuler:22.03-LTS From an advisory covering 9 CVEs	before java-1.8.0-openjdk-1.8.0.402.b06-0.oe2203sp3	java-1.8.0-openjdk-1.8.0.402.b06-0.oe2203sp3
`openjdk-1.8.0` openEuler:22.03-LTS-SP1 From an advisory covering 9 CVEs	before java-1.8.0-openjdk-1.8.0.402.b06-0.oe2203sp1	java-1.8.0-openjdk-1.8.0.402.b06-0.oe2203sp1
`openjdk-1.8.0` openEuler:22.03-LTS-SP2 From an advisory covering 9 CVEs	before java-1.8.0-openjdk-1.8.0.402.b06-0.oe2203sp2	java-1.8.0-openjdk-1.8.0.402.b06-0.oe2203sp2
`openjdk-1.8.0` openEuler:22.03-LTS-SP3 From an advisory covering 9 CVEs	before java-1.8.0-openjdk-1.8.0.402.b06-0.oe2203sp3	java-1.8.0-openjdk-1.8.0.402.b06-0.oe2203sp3
`openjdk-11` openEuler:20.03-LTS-SP1 From an advisory covering 6 CVEs	before java-11-openjdk-11.0.22.7-0.oe1	java-11-openjdk-11.0.22.7-0.oe1
`openjdk-11` openEuler:20.03-LTS-SP4 From an advisory covering 6 CVEs	before java-11-openjdk-11.0.22.7-0.oe2003sp4	java-11-openjdk-11.0.22.7-0.oe2003sp4
`openjdk-11` openEuler:22.03-LTS-SP1 From an advisory covering 6 CVEs	before java-11-openjdk-11.0.22.7-0.oe2203sp1	java-11-openjdk-11.0.22.7-0.oe2203sp1
`openjdk-11` openEuler:22.03-LTS-SP2 From an advisory covering 6 CVEs	before java-11-openjdk-11.0.22.7-0.oe2203sp2	java-11-openjdk-11.0.22.7-0.oe2203sp2
`openjdk-11` openEuler:22.03-LTS-SP3 From an advisory covering 6 CVEs	before java-11-openjdk-11.0.22.7-0.oe2203sp3	java-11-openjdk-11.0.22.7-0.oe2203sp3
`openjdk-17` openEuler:20.03-LTS-SP4 From an advisory covering 4 CVEs	before java-17-openjdk-17.0.11.9-1.oe2003sp4	java-17-openjdk-17.0.11.9-1.oe2003sp4
`openjdk-17` openEuler:22.03-LTS-SP1 From an advisory covering 4 CVEs	before java-17-openjdk-17.0.11.9-1.oe2203sp1	java-17-openjdk-17.0.11.9-1.oe2203sp1
`openjdk-17` openEuler:22.03-LTS-SP2 From an advisory covering 4 CVEs	before java-17-openjdk-17.0.11.9-1.oe2203sp2	java-17-openjdk-17.0.11.9-1.oe2203sp2
`openjdk-17` openEuler:22.03-LTS-SP3 From an advisory covering 4 CVEs	before java-17-openjdk-17.0.11.9-1.oe2203sp3	java-17-openjdk-17.0.11.9-1.oe2203sp3
`openjdk-latest` openEuler:22.03-LTS-SP3 From an advisory covering 43 CVEs	before java-latest-openjdk-23.0.1.11-1.oe2203sp3	java-latest-openjdk-23.0.1.11-1.oe2203sp3
`openjdk-latest` openEuler:20.03-LTS-SP4 From an advisory covering 43 CVEs	before java-latest-openjdk-23.0.1.11-1.oe2003sp4	java-latest-openjdk-23.0.1.11-1.oe2003sp4
`openjdk-latest` openEuler:22.03-LTS-SP1 From an advisory covering 41 CVEs	before java-latest-openjdk-23.0.1.11-1.oe2203sp1	java-latest-openjdk-23.0.1.11-1.oe2203sp1
`openjdk-latest` openEuler:24.03-LTS From an advisory covering 43 CVEs	before java-latest-openjdk-23.0.1.11-1.oe2403	java-latest-openjdk-23.0.1.11-1.oe2403
`openjdk-latest` openEuler:22.03-LTS-SP4 From an advisory covering 43 CVEs	before java-latest-openjdk-23.0.1.11-1.oe2203sp4	java-latest-openjdk-23.0.1.11-1.oe2203sp4
`java-1.8.0-openjdk` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-headless` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-accessibility` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-demo` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-devel` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-javadoc` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-javadoc-zip` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-src` Red Hat:enterprise_linux:7::client From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-accessibility` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-demo` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-javadoc` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-javadoc-zip` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-src` Red Hat:enterprise_linux:7::computenode From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-devel` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-headless` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-accessibility` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-demo` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-javadoc` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-javadoc-zip` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-src` Red Hat:enterprise_linux:7::server From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-headless` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-accessibility` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-demo` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-javadoc` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-javadoc-zip` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk-src` Red Hat:enterprise_linux:7::workstation From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el7_9	1:1.8.0.402.b06-1.el7_9
`java-1.8.0-openjdk` Red Hat:rhel_aus:8.2::appstream From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el8_2	1:1.8.0.402.b06-1.el8_2
`java-1.8.0-openjdk-accessibility` Red Hat:rhel_aus:8.2::appstream From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el8_2	1:1.8.0.402.b06-1.el8_2
`java-1.8.0-openjdk-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el8_2	1:1.8.0.402.b06-1.el8_2
`java-1.8.0-openjdk-debugsource` Red Hat:rhel_aus:8.2::appstream From an advisory covering 6 CVEs	before 1:1.8.0.402.b06-1.el8_2	1:1.8.0.402.b06-1.el8_2
`java-11-openjdk` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 6 CVEs	before 11.0.22.0-3.72.2	11.0.22.0-3.72.2
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 6 CVEs	before 11.0.22.0-3.72.2	11.0.22.0-3.72.2
`java-11-openjdk` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Manager Proxy 4.3 From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Manager Server 4.3 From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` SUSE:Enterprise Storage 7.1 From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-11-openjdk` openSUSE:Leap 15.5 From an advisory covering 6 CVEs	before 11.0.22.0-150000.3.110.1	11.0.22.0-150000.3.110.1
`java-17-openjdk` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 6 CVEs	before 17.0.10.0-150400.3.36.1	17.0.10.0-150400.3.36.1
`java-17-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 6 CVEs	before 17.0.10.0-150400.3.36.1	17.0.10.0-150400.3.36.1
`java-17-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 6 CVEs	before 17.0.10.0-150400.3.36.1	17.0.10.0-150400.3.36.1
`java-17-openjdk` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 6 CVEs	before 17.0.10.0-150400.3.36.1	17.0.10.0-150400.3.36.1
`java-17-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 6 CVEs	before 17.0.10.0-150400.3.36.1	17.0.10.0-150400.3.36.1
`java-17-openjdk` SUSE:Manager Proxy 4.3 From an advisory covering 6 CVEs	before 17.0.10.0-150400.3.36.1	17.0.10.0-150400.3.36.1
`java-17-openjdk` SUSE:Manager Server 4.3 From an advisory covering 6 CVEs	before 17.0.10.0-150400.3.36.1	17.0.10.0-150400.3.36.1
`java-17-openjdk` openSUSE:Leap 15.5 From an advisory covering 6 CVEs	before 17.0.10.0-150400.3.36.1	17.0.10.0-150400.3.36.1
`java-1_8_0-openj9` SUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 7 CVEs	before 1.8.0.402-150200.3.42.1	1.8.0.402-150200.3.42.1
`java-1_8_0-openj9` openSUSE:Leap 15.5 From an advisory covering 7 CVEs	before 1.8.0.402-150200.3.42.1	1.8.0.402-150200.3.42.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 8 CVEs	before 1.8.0_sr8.20-30.120.1	1.8.0_sr8.20-30.120.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 8 CVEs	before 1.8.0_sr8.20-30.120.1	1.8.0_sr8.20-30.120.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 8 CVEs	before 1.8.0_sr8.20-30.120.1	1.8.0_sr8.20-30.120.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 8 CVEs	before 1.8.0_sr8.20-150000.3.86.1	1.8.0_sr8.20-150000.3.86.1
`java-1_8_0-ibm` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 8 CVEs	before 1.8.0_sr8.20-150000.3.86.1	1.8.0_sr8.20-150000.3.86.1
`java-1_8_0-ibm` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 8 CVEs	before 1.8.0_sr8.20-150000.3.86.1	1.8.0_sr8.20-150000.3.86.1
`java-1_8_0-ibm` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 8 CVEs	before 1.8.0_sr8.20-150000.3.86.1	1.8.0_sr8.20-150000.3.86.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 8 CVEs	before 1.8.0_sr8.20-150000.3.86.1	1.8.0_sr8.20-150000.3.86.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 8 CVEs	before 1.8.0_sr8.20-150000.3.86.1	1.8.0_sr8.20-150000.3.86.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 8 CVEs	before 1.8.0_sr8.20-150000.3.86.1	1.8.0_sr8.20-150000.3.86.1
`java-1_8_0-ibm` openSUSE:Leap 15.5 From an advisory covering 8 CVEs	before 1.8.0_sr8.20-150000.3.86.1	1.8.0_sr8.20-150000.3.86.1
`java-1_8_0-openjdk` openSUSE:Leap 15.5 From an advisory covering 6 CVEs	before 1.8.0.402-150000.3.88.1	1.8.0.402-150000.3.88.1
`openjdk-8` Ubuntu:Pro:16.04:LTS	before 8u432-ga~us1-0ubuntu2~16.04.4, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 38 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.18u392-ga-1~16.04	8u432-ga~us1-0ubuntu2~16.04.4
`openjdk-9` Ubuntu:16.04:LTS	All versions, plus listed versions 9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1	None known
`openjdk-lts` Ubuntu:Pro:18.04:LTS	before 11.0.22+7-0ubuntu2~18.04.1, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 27 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.111.0.19+7~us1-0ubuntu1~18.04.111.0.20+8-1ubuntu1~18.0411.0.20.1+1-0ubuntu1~18.0411.0.21+9-0ubuntu1~18.04	11.0.22+7-0ubuntu2~18.04.1
`openjdk-17` Ubuntu:Pro:18.04:LTS	before 17.0.10+7-1~18.04.1, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.04 Show 6 moreShow less 17.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.0417.0.8+7-1~18.0417.0.8.1+1~us1-0ubuntu1~18.0417.0.9+9-1~18.04	17.0.10+7-1~18.04.1
`openjdk-8` Ubuntu:Pro:18.04:LTS	before 8u402-ga-2ubuntu1~18.04, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 20 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.04	8u402-ga-2ubuntu1~18.04
`openjdk-17` Ubuntu:20.04:LTS	before 17.0.10+7-1~20.04.1, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.04 Show 6 moreShow less 17.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.0417.0.8+7-1~20.04.217.0.8.1+1~us1-0ubuntu1~20.0417.0.9+9-1~20.04	17.0.10+7-1~20.04.1
`openjdk-21` Ubuntu:20.04:LTS	before 21.0.2+13-1~20.04.1, plus listed versions 21.0.1+12-2~20.04.1	21.0.2+13-1~20.04.1
`openjdk-8` Ubuntu:20.04:LTS	before 8u402-ga-2ubuntu1~20.04, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 13 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.04	8u402-ga-2ubuntu1~20.04
`openjdk-lts` Ubuntu:20.04:LTS	before 11.0.22+7-0ubuntu2~20.04.1, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 18 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.111.0.19+7~us1-0ubuntu1~20.04.111.0.20+8-1ubuntu1~20.0411.0.20.1+1-0ubuntu1~20.0411.0.21+9-0ubuntu1~20.04	11.0.22+7-0ubuntu2~20.04.1
`openjdk-13` Ubuntu:20.04:LTS	All versions, plus listed versions 13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04	None known
`openjdk-16` Ubuntu:20.04:LTS	All versions, plus listed versions 16.0.1+9-1~20.04	None known
`openjdk-17` Ubuntu:22.04:LTS	before 17.0.10+7-1~22.04.1, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.04 Show 6 moreShow less 17.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.217.0.8+7-1~22.0417.0.8.1+1~us1-0ubuntu1~22.0417.0.9+9-1~22.04	17.0.10+7-1~22.04.1
`openjdk-18` Ubuntu:22.04:LTS	All versions, plus listed versions 18~15ea-418~20ea-118~32ea-118~36ea-118.0.2+9-2~22.04	None known
`openjdk-21` Ubuntu:22.04:LTS	before 21.0.2+13-1~22.04.1, plus listed versions 21.0.1+12-2~22.04	21.0.2+13-1~22.04.1
`openjdk-8` Ubuntu:22.04:LTS	before 8u402-ga-2ubuntu1~22.04, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.048u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.04	8u402-ga-2ubuntu1~22.04
`openjdk-lts` Ubuntu:22.04:LTS	before 11.0.22+7-0ubuntu2~22.04.1, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.1 Show 7 moreShow less 11.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.0411.0.19+7~us1-0ubuntu1~22.04.111.0.20+8-1ubuntu1~22.0411.0.20.1+1-0ubuntu1~22.0411.0.21+9-0ubuntu1~22.04	11.0.22+7-0ubuntu2~22.04.1
`openjdk-lts` Ubuntu:Pro:18.04:LTS From an advisory covering 6 CVEs	before 11.0.22+7-0ubuntu2~18.04.1, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 27 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.111.0.19+7~us1-0ubuntu1~18.04.111.0.20+8-1ubuntu1~18.0411.0.20.1+1-0ubuntu1~18.0411.0.21+9-0ubuntu1~18.04	11.0.22+7-0ubuntu2~18.04.1
`openjdk-lts` Ubuntu:20.04:LTS From an advisory covering 6 CVEs	before 11.0.22+7-0ubuntu2~20.04.1, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 18 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.111.0.19+7~us1-0ubuntu1~20.04.111.0.20+8-1ubuntu1~20.0411.0.20.1+1-0ubuntu1~20.0411.0.21+9-0ubuntu1~20.04	11.0.22+7-0ubuntu2~20.04.1
`openjdk-lts` Ubuntu:22.04:LTS From an advisory covering 6 CVEs	before 11.0.22+7-0ubuntu2~22.04.1, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.1 Show 7 moreShow less 11.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.0411.0.19+7~us1-0ubuntu1~22.04.111.0.20+8-1ubuntu1~22.0411.0.20.1+1-0ubuntu1~22.0411.0.21+9-0ubuntu1~22.04	11.0.22+7-0ubuntu2~22.04.1
`openjdk-17` Ubuntu:Pro:18.04:LTS From an advisory covering 6 CVEs	before 17.0.10+7-1~18.04.1, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.04 Show 6 moreShow less 17.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.0417.0.8+7-1~18.0417.0.8.1+1~us1-0ubuntu1~18.0417.0.9+9-1~18.04	17.0.10+7-1~18.04.1
`openjdk-17` Ubuntu:20.04:LTS From an advisory covering 6 CVEs	before 17.0.10+7-1~20.04.1, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.04 Show 6 moreShow less 17.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.0417.0.8+7-1~20.04.217.0.8.1+1~us1-0ubuntu1~20.0417.0.9+9-1~20.04	17.0.10+7-1~20.04.1
`openjdk-17` Ubuntu:22.04:LTS From an advisory covering 6 CVEs	before 17.0.10+7-1~22.04.1, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.04 Show 6 moreShow less 17.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.217.0.8+7-1~22.0417.0.8.1+1~us1-0ubuntu1~22.0417.0.9+9-1~22.04	17.0.10+7-1~22.04.1
`openjdk-21` Ubuntu:20.04:LTS From an advisory covering 5 CVEs	before 21.0.2+13-1~20.04.1, plus listed versions 21.0.1+12-2~20.04.1	21.0.2+13-1~20.04.1
`openjdk-21` Ubuntu:22.04:LTS From an advisory covering 5 CVEs	before 21.0.2+13-1~22.04.1, plus listed versions 21.0.1+12-2~22.04	21.0.2+13-1~22.04.1
`openjdk-8` Ubuntu:Pro:18.04:LTS From an advisory covering 6 CVEs	before 8u402-ga-2ubuntu1~18.04, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 20 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.04	8u402-ga-2ubuntu1~18.04
`openjdk-8` Ubuntu:20.04:LTS From an advisory covering 6 CVEs	before 8u402-ga-2ubuntu1~20.04, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 13 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.04	8u402-ga-2ubuntu1~20.04
`openjdk-8` Ubuntu:22.04:LTS From an advisory covering 6 CVEs	before 8u402-ga-2ubuntu1~22.04, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.048u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.04	8u402-ga-2ubuntu1~22.04
`openjdk-8` Ubuntu:Pro:16.04:LTS From an advisory covering 20 CVEs	before 8u432-ga~us1-0ubuntu2~16.04.4, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 38 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.18u392-ga-1~16.04	8u432-ga~us1-0ubuntu2~16.04.4
`openjdk-8` Ubuntu:Pro:18.04:LTS From an advisory covering 20 CVEs	before 8u432-ga~us1-0ubuntu2~18.04, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 23 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.18u392-ga-1~18.048u402-ga-2ubuntu1~18.048u412-ga-1~18.04.18u422-b05-1~18.04	8u432-ga~us1-0ubuntu2~18.04
`openjdk-8` Ubuntu:20.04:LTS From an advisory covering 20 CVEs	before 8u432-ga~us1-0ubuntu2~20.04, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 16 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.18u392-ga-1~20.048u402-ga-2ubuntu1~20.048u412-ga-1~20.04.18u422-b05-1~20.04	8u432-ga~us1-0ubuntu2~20.04
`openjdk-8` Ubuntu:22.04:LTS From an advisory covering 20 CVEs	before 8u432-ga~us1-0ubuntu2~22.04, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04 Show 6 moreShow less 8u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.18u392-ga-1~22.048u402-ga-2ubuntu1~22.048u412-ga-1~22.04.18u422-b05-1~22.04	8u432-ga~us1-0ubuntu2~22.04
`openjdk-8` Ubuntu:24.04:LTS From an advisory covering 20 CVEs	before 8u432-ga~us1-0ubuntu2~24.04, plus listed versions 8u382-ga-1ubuntu18u392-ga-18u402-ga-18u402-ga-28u402-ga-2ubuntu1 Show 5 moreShow less 8u402-ga-2ubuntu68u402-ga-2ubuntu78u402-ga-8build18u412-ga-1~24.04.28u422-b05-1~24.04	8u432-ga~us1-0ubuntu2~24.04
`java-17-openjdk` openSUSE:Tumbleweed From an advisory covering 6 CVEs	before 17.0.10.0-1.1	17.0.10.0-1.1
`java-21-openjdk` openSUSE:Tumbleweed From an advisory covering 5 CVEs	before 21.0.2.0-1.1	21.0.2.0-1.1
`java-11-openjdk` openSUSE:Tumbleweed From an advisory covering 6 CVEs	before 11.0.22.0-1.1	11.0.22.0-1.1
`java-1_8_0-openjdk` openSUSE:Tumbleweed From an advisory covering 6 CVEs	before 1.8.0.402-1.1	1.8.0.402-1.1
`java-11-openj9` openSUSE:Tumbleweed From an advisory covering 3 CVEs	before 11.0.22.0-1.1	11.0.22.0-1.1
`java-17-openj9` openSUSE:Tumbleweed From an advisory covering 3 CVEs	before 17.0.10.0-1.1	17.0.10.0-1.1
`java-1_8_0-openj9` openSUSE:Tumbleweed From an advisory covering 3 CVEs	before 1.8.0.402-1.1	1.8.0.402-1.1
`java-11-openj9` openSUSE:Leap 15.6 From an advisory covering 58 CVEs	before 11.0.26.0-bp156.4.3.1	11.0.26.0-bp156.4.3.1
`java-17-openj9` openSUSE:Leap 15.6 From an advisory covering 47 CVEs	before 17.0.14.0-bp156.3.3.1	17.0.14.0-bp156.3.3.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected, aliases, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-20918 is a high vulnerability (CVSS 7.4) in Oracle Graalvm, published January 16, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.92%, the 60th percentile. Fixed in openjdk11 11.0.22_p7-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 1,339 package rows, 32 versions, 159 references and the rest of 16 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 36 source records.