CVE-2022-40433

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11,...

7.5 HighFix availableRejected

** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

What each source reports

GitHub Advisories Score usedGHSA-mw2q-wjxp-qm79 7.5

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11,...

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.

Record: GHSA-mw2q-wjxp-qm79
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

CVE List No score

** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.

Record: CVE-2022-40433
Updated: 2026-11-02

EUVDEUVD-2022-43712 No score

** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.

Record: EUVD-2022-43712
Updated: 2026-11-03

NVD No score

Rejected reason: ** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.

Record: CVE-2022-40433
Updated: 2026-11-02

OSVOESA-2023-1600 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21830)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DTLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-21835)

Record: OESA-2023-1600
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1601 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1601
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

Show 29 moreShow less

OSVOESA-2023-1602 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1602
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1603 5.9

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1603
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVOESA-2023-1617 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21843)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21937)

Record: OESA-2023-1617
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1618 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2023-21930)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1618
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1642 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1642
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1643 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1643
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1644 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1644
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1645 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1645
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1646 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1646
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1650 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1650
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1737 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1737
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1738 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1738
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1739 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1739
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:5727 5.3

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:5727
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:5728 5.3

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:5728
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:5729 5.3

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:5729
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:5730 5.3

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:5730
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:5731 5.3

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:5731
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:5732 5.3

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:5732
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:5733 5.3

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:5733
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVUBUNTU-CVE-2022-40433 4.9

Rejected reason: ** REJECT ** This CVE ID has been rejected by its CNA as it was not a security issue.

Record: UBUNTU-CVE-2022-40433
CVSS 3.1: 4.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVALSA-2023:5731 No score

Moderate: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (AlmaLinux-13635)
The /usr/bin/jfr alternative is now owned by the java-1.8.0-openjdk package (AlmaLinux-13641)

Record: ALSA-2023:5731
Updated: 2026-11-02

OSVALSA-2023:5733 No score

Moderate: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433)
OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067)
OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (AlmaLinux-13593)
The /usr/bin/jfr alternative is now owned by the java-1.8.0-openjdk package (AlmaLinux-13583)

Record: ALSA-2023:5733
Updated: 2026-11-02

OSVCLSA-2023-1694538145 No score

Fix CVE(s): CVE-2022-40433

CVE-2022-40433: Segmentation fault in ciMethodBlocks::make_block_at(int)

Record: CLSA-2023-1694538145
Updated: 2026-11-02

OSVCLSA-2023-1694538670 No score

Fix CVE(s): CVE-2022-40433

CVE-2022-40433: Segmentation fault in ciMethodBlocks::make_block_at(int)

Record: CLSA-2023-1694538670
Updated: 2026-11-02

OSVCLSA-2023-1703610997 No score

Fix of 5 CVEs

Backport upstream releases 8u392 to 18.04 LTS
CVEs fixed in 8u392:
- CVE-2023-22067: IOR deserialization issue in CORBA
- CVE-2023-22081: Certificate path validation issue
CVEs fixed in 8u382:
- CVE-2023-22045: OpenJDK incorrectly handled array accesses.
- CVE-2023-22049: OpenJDK incorrectly sanitized URIs strings.
Drop applied CVE-2022-40433.patch (changes are already in the sources)

Record: CLSA-2023-1703610997
Updated: 2026-11-02

OSVCLSA-2023-1703612003 No score

Fix CVE(s): CVE-2022-40433, CVE-2023-22067, CVE-2023-22081

Backport upstream releases 8u392 to 16.04 LTS
CVEs fixed in 8u392:
- CVE-2023-22067: IOR deserialization issue in CORBA
- CVE-2023-22081: Certificate path validation issue
Drop applied CVE-2022-40433.patch (changes are already in the sources)

Record: CLSA-2023-1703612003
Updated: 2026-11-02

OSVMGASA-2023-0326 No score

Updated java openjdk packages fix security vulnerabilities

The updated packages fix security vulnerabilities:

Segmentation fault in ciMethodBlocks. (CVE-2022-40433)

Certificate path validation issue during client authentication. (CVE-2023-22081)

IOR deserialization issue in CORBA. (CVE-2023-22067)

Record: MGASA-2023-0326
Updated: 2026-11-02

OSVUSN-6528-1 No score

openjdk-8 vulnerabilities

It was discovered that the HotSpot VM implementation in OpenJDK did not properly validate bytecode blocks in certain situations. An attacker could possibly use this to cause a denial of service. (CVE-2022-40433)

Carter Kozak discovered that OpenJDK, when compiling with AVX-512 instruction support enabled, could produce code that resulted in memory corruption in certain situations. An attacker targeting applications built in this way could possibly use this to cause a denial of service or execute arbitrary code. In Ubuntu, OpenJDK defaults to not using AVX-512 instructions. (CVE-2023-22025)

It was discovered that the CORBA implementation in OpenJDK did not properly perform deserialization of IOR string objects. An attacker could possibly use this to bypass Java sandbox restrictions. (CVE-2023-22067)

It was discovered that OpenJDK did not properly perform PKIX certification path validation in certain situations. An attacker could use this to cause a denial of service. (CVE-2023-22081)

Record: USN-6528-1
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`java-1.8.0-openjdk` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-accessibility` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-accessibility-fastdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-accessibility-slowdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-demo` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-demo-fastdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-demo-slowdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-devel` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-devel-fastdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-devel-slowdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`java-1.8.0-openjdk-fastdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-headless` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-headless-fastdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-headless-slowdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-javadoc` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-javadoc-zip` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-slowdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-src` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-src-fastdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-src-slowdebug` AlmaLinux:8 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-demo` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-devel` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-headless` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-javadoc` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-src` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`java-1.8.0-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-3.el9	1:1.8.0.392.b08-3.el9
`openjdk-8-demo` TuxCare:Ubuntu:16.04	before 8u372-ga-0ubuntu1~16.04+tuxcare.els2	8u372-ga-0ubuntu1~16.04+tuxcare.els2
`openjdk-8-doc` TuxCare:Ubuntu:16.04	before 8u372-ga-0ubuntu1~16.04+tuxcare.els2	8u372-ga-0ubuntu1~16.04+tuxcare.els2
`openjdk-8-jdk` TuxCare:Ubuntu:16.04	before 8u372-ga-0ubuntu1~16.04+tuxcare.els2	8u372-ga-0ubuntu1~16.04+tuxcare.els2
`openjdk-8-jdk-headless` TuxCare:Ubuntu:16.04	before 8u372-ga-0ubuntu1~16.04+tuxcare.els2	8u372-ga-0ubuntu1~16.04+tuxcare.els2
`openjdk-8-jre` TuxCare:Ubuntu:16.04	before 8u372-ga-0ubuntu1~16.04+tuxcare.els2	8u372-ga-0ubuntu1~16.04+tuxcare.els2
`openjdk-8-jre-headless` TuxCare:Ubuntu:16.04	before 8u372-ga-0ubuntu1~16.04+tuxcare.els2	8u372-ga-0ubuntu1~16.04+tuxcare.els2
`openjdk-8-jre-jamvm` TuxCare:Ubuntu:16.04	before 8u372-ga-0ubuntu1~16.04+tuxcare.els2	8u372-ga-0ubuntu1~16.04+tuxcare.els2
`openjdk-8-jre-zero` TuxCare:Ubuntu:16.04	before 8u372-ga-0ubuntu1~16.04+tuxcare.els2	8u372-ga-0ubuntu1~16.04+tuxcare.els2
`openjdk-8-source` TuxCare:Ubuntu:16.04	before 8u372-ga-0ubuntu1~16.04+tuxcare.els2	8u372-ga-0ubuntu1~16.04+tuxcare.els2
`openjdk-8-demo` TuxCare:Ubuntu:18.04	before 8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-doc` TuxCare:Ubuntu:18.04	before 8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-jdk` TuxCare:Ubuntu:18.04	before 8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-jdk-headless` TuxCare:Ubuntu:18.04	before 8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-jre` TuxCare:Ubuntu:18.04	before 8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-jre-headless` TuxCare:Ubuntu:18.04	before 8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-jre-zero` TuxCare:Ubuntu:18.04	before 8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-source` TuxCare:Ubuntu:18.04	before 8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u372-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-demo` TuxCare:Ubuntu:18.04 From an advisory covering 5 CVEs	before 8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-doc` TuxCare:Ubuntu:18.04 From an advisory covering 5 CVEs	before 8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-jdk` TuxCare:Ubuntu:18.04 From an advisory covering 5 CVEs	before 8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-jdk-headless` TuxCare:Ubuntu:18.04 From an advisory covering 5 CVEs	before 8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-jre` TuxCare:Ubuntu:18.04 From an advisory covering 5 CVEs	before 8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-jre-headless` TuxCare:Ubuntu:18.04 From an advisory covering 5 CVEs	before 8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-jre-zero` TuxCare:Ubuntu:18.04 From an advisory covering 5 CVEs	before 8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-source` TuxCare:Ubuntu:18.04 From an advisory covering 5 CVEs	before 8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1	8u392-ga~us1-0ubuntu1~18.04+tuxcare.els1
`openjdk-8-demo` TuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs	before 8u392-ga-0ubuntu1~16.04+tuxcare.els1	8u392-ga-0ubuntu1~16.04+tuxcare.els1
`openjdk-8-doc` TuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs	before 8u392-ga-0ubuntu1~16.04+tuxcare.els1	8u392-ga-0ubuntu1~16.04+tuxcare.els1
`openjdk-8-jdk` TuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs	before 8u392-ga-0ubuntu1~16.04+tuxcare.els1	8u392-ga-0ubuntu1~16.04+tuxcare.els1
`openjdk-8-jdk-headless` TuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs	before 8u392-ga-0ubuntu1~16.04+tuxcare.els1	8u392-ga-0ubuntu1~16.04+tuxcare.els1
`openjdk-8-jre` TuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs	before 8u392-ga-0ubuntu1~16.04+tuxcare.els1	8u392-ga-0ubuntu1~16.04+tuxcare.els1
`openjdk-8-jre-headless` TuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs	before 8u392-ga-0ubuntu1~16.04+tuxcare.els1	8u392-ga-0ubuntu1~16.04+tuxcare.els1
`openjdk-8-jre-jamvm` TuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs	before 8u392-ga-0ubuntu1~16.04+tuxcare.els1	8u392-ga-0ubuntu1~16.04+tuxcare.els1
`openjdk-8-jre-zero` TuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs	before 8u392-ga-0ubuntu1~16.04+tuxcare.els1	8u392-ga-0ubuntu1~16.04+tuxcare.els1
`openjdk-8-source` TuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs	before 8u392-ga-0ubuntu1~16.04+tuxcare.els1	8u392-ga-0ubuntu1~16.04+tuxcare.els1
`java-1.8.0-openjdk` Mageia:8 From an advisory covering 3 CVEs	before 1.8.0.392.b08-1.mga8	1.8.0.392.b08-1.mga8
`java-11-openjdk` Mageia:8 From an advisory covering 3 CVEs	before 11.0.21.0.9-1.mga8	11.0.21.0.9-1.mga8
`java-1.8.0-openjdk` Mageia:9 From an advisory covering 3 CVEs	before 1.8.0.392.b08-1.mga9	1.8.0.392.b08-1.mga9
`java-11-openjdk` Mageia:9 From an advisory covering 3 CVEs	before 11.0.21.0.9-1.mga9	11.0.21.0.9-1.mga9
`java-latest-openjdk` Mageia:9 From an advisory covering 3 CVEs	before 21.0.1.0.12-1.rolling.1.mga9	21.0.1.0.12-1.rolling.1.mga9
`openjdk-latest` openEuler:20.03-LTS-SP3 From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-2.rolling.oe1	java-latest-openjdk-20.0.2.9-2.rolling.oe1
`openjdk-latest` openEuler:22.03-LTS From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-1.rolling.oe2203	java-latest-openjdk-20.0.2.9-1.rolling.oe2203
`openjdk-latest` openEuler:22.03-LTS-SP1 From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp1	java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp1
`openjdk-latest` openEuler:22.03-LTS-SP2 From an advisory covering 13 CVEs	before java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp2	java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp2
`openjdk-11` openEuler:22.03-LTS-SP1 From an advisory covering 14 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203sp1	java-11-openjdk-11.0.20.8-2.oe2203sp1
`openjdk-11` openEuler:22.03-LTS-SP2 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203sp2	java-11-openjdk-11.0.20.8-2.oe2203sp2
`openjdk-1.8.0` openEuler:20.03-LTS-SP1 From an advisory covering 13 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-7.oe1	java-1.8.0-openjdk-1.8.0.382.b05-7.oe1
`openjdk-1.8.0` openEuler:20.03-LTS-SP3 From an advisory covering 13 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-7.oe1	java-1.8.0-openjdk-1.8.0.382.b05-7.oe1
`openjdk-1.8.0` openEuler:22.03-LTS From an advisory covering 13 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203	java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203
`openjdk-1.8.0` openEuler:22.03-LTS-SP1 From an advisory covering 12 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp1	java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp1
`openjdk-1.8.0` openEuler:22.03-LTS-SP2 From an advisory covering 12 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp2	java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp2
`openjdk-latest` openEuler:20.03-LTS-SP1 From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-2.rolling.oe1	java-latest-openjdk-20.0.2.9-2.rolling.oe1
`openjdk-11` openEuler:20.03-LTS-SP1 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe1	java-11-openjdk-11.0.20.8-2.oe1
`openjdk-11` openEuler:20.03-LTS-SP3 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe1	java-11-openjdk-11.0.20.8-2.oe1
`openjdk-11` openEuler:22.03-LTS From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203	java-11-openjdk-11.0.20.8-2.oe2203
`java-1.8.0-openjdk` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-accessibility` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-debugsource` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-demo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-demo-slowdebug-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-devel` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-headless` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-javadoc` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-javadoc-zip` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-slowdebug-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk-src` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_1	1:1.8.0.392.b08-2.el8_1
`java-1.8.0-openjdk` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-accessibility` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-debugsource` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-demo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-demo-slowdebug-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-devel` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-headless` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-javadoc` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-javadoc-zip` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-slowdebug-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-src` Red Hat:rhel_aus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-accessibility` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-debugsource` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-demo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-demo-slowdebug-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-devel` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-headless` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-javadoc` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-javadoc-zip` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-slowdebug-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-src` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-accessibility` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-debugsource` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-demo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-demo-slowdebug-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-devel` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-headless` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-javadoc` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-javadoc-zip` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-slowdebug-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk-src` Red Hat:rhel_tus:8.2::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_2	1:1.8.0.392.b08-2.el8_2
`java-1.8.0-openjdk` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-accessibility` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-debugsource` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-demo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-demo-fastdebug-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-demo-slowdebug-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-devel` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-devel-fastdebug-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-fastdebug-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-headless` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-headless-fastdebug-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-javadoc` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-javadoc-zip` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-slowdebug-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-src` Red Hat:rhel_aus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-accessibility` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-debuginfo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-debugsource` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-demo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-demo-slowdebug-debuginfo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-devel` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-headless` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-javadoc` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-javadoc-zip` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-slowdebug-debuginfo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-src` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-accessibility` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-debuginfo` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-debugsource` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-demo` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-devel` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-headless` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-javadoc` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-javadoc-zip` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk-src` Red Hat:rhel_tus:8.4::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_4	1:1.8.0.392.b08-2.el8_4
`java-1.8.0-openjdk` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-accessibility` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-debugsource` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-demo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-devel` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-headless` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-javadoc` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-javadoc-zip` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-src` Red Hat:rhel_eus:8.6::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-accessibility-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-accessibility-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-debugsource` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-demo-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-demo-fastdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-demo-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-demo-slowdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-devel-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-devel-fastdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-devel-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-fastdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-headless-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-headless-fastdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-headless-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-slowdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-src-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk-src-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-2.el8_6	1:1.8.0.392.b08-2.el8_6
`java-1.8.0-openjdk` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-accessibility` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-demo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-devel` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-headless` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-javadoc` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-javadoc-zip` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-src` Red Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-accessibility-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-accessibility-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-demo-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-demo-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-demo-fastdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-demo-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-demo-slowdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-devel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-devel-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-devel-fastdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-devel-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-devel-slowdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-fastdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-headless-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-headless-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-headless-fastdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-headless-slowdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`java-1.8.0-openjdk-headless-slowdebug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 3 CVEs	before 1:1.8.0.392.b08-4.el8	1:1.8.0.392.b08-4.el8
`openjdk-8` Ubuntu:Pro:16.04:LTS	before 8u392-ga-1~16.04, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 37 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.1	8u392-ga-1~16.04
`openjdk-9` Ubuntu:16.04:LTS	All versions, plus listed versions 9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1	None known
`openjdk-17` Ubuntu:18.04:LTS	before 17.0.5+8-2ubuntu1~18.04, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.04	17.0.5+8-2ubuntu1~18.04
`openjdk-lts` Ubuntu:18.04:LTS	before 11.0.17+8-1ubuntu2~18.04, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 21 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.04	11.0.17+8-1ubuntu2~18.04
`openjdk-8` Ubuntu:Pro:18.04:LTS	before 8u392-ga-1~18.04, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 19 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.1	8u392-ga-1~18.04
`openjdk-17` Ubuntu:20.04:LTS	before 17.0.5+8-2ubuntu1~20.04, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.04	17.0.5+8-2ubuntu1~20.04
`openjdk-8` Ubuntu:20.04:LTS	before 8u392-ga-1~20.04, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 12 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.1	8u392-ga-1~20.04
`openjdk-lts` Ubuntu:20.04:LTS	before 11.0.17+8-1ubuntu2~20.04, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 12 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.04	11.0.17+8-1ubuntu2~20.04
`openjdk-13` Ubuntu:20.04:LTS	All versions, plus listed versions 13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04	None known
`openjdk-16` Ubuntu:20.04:LTS	All versions, plus listed versions 16.0.1+9-1~20.04	None known
`openjdk-17` Ubuntu:22.04:LTS	before 17.0.5+8-2ubuntu1~22.04, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.04	17.0.5+8-2ubuntu1~22.04
`openjdk-18` Ubuntu:22.04:LTS	All versions, plus listed versions 18~15ea-418~20ea-118~32ea-118~36ea-118.0.2+9-2~22.04	None known
`openjdk-8` Ubuntu:22.04:LTS	before 8u392-ga-1~22.04, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.048u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.1	8u392-ga-1~22.04
`openjdk-lts` Ubuntu:22.04:LTS	before 11.0.17+8-1ubuntu2~22.04, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.111.0.16+8-0ubuntu1~22.04	11.0.17+8-1ubuntu2~22.04
`openjdk-8` Ubuntu:Pro:16.04:LTS From an advisory covering 4 CVEs	before 8u392-ga-1~16.04, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 37 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.048u382-ga-1~16.04.1	8u392-ga-1~16.04
`openjdk-8` Ubuntu:Pro:18.04:LTS From an advisory covering 4 CVEs	before 8u392-ga-1~18.04, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 19 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.048u382-ga-1~18.04.1	8u392-ga-1~18.04
`openjdk-8` Ubuntu:20.04:LTS From an advisory covering 4 CVEs	before 8u392-ga-1~20.04, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 12 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.048u382-ga-1~20.04.1	8u392-ga-1~20.04
`openjdk-8` Ubuntu:22.04:LTS From an advisory covering 4 CVEs	before 8u392-ga-1~22.04, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.048u372-ga~us1-0ubuntu1~22.048u382-ga-1~22.04.1	8u392-ga-1~22.04

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-40433 has been rejected by its source and should not be treated as a live vulnerability, published August 22, 2023. Fixed in openjdk-8-demo 8u372-ga-0ubuntu1~16.04+tuxcare.els2.

References

Show 75 moreShow less

This page doesn't list everything

Left out here: 74 package rows and the rest of 15 source descriptions. The JSON record has them.