CVE-2023-21835

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...

5.3 MediumFix available

What does this mean?

: 5.3v3.1, from CVE List
: 1.89%79th percentile
Fixed in: 11.0.18_p10-r0openjdk11
Published: January 17, 2023
Modified: November 3, 2026
Also known as: ALPINE-CVE-2023-21835ALSA-2023:0192ALSA-2023:0194ALSA-2023:0200ALSA-2023:0202BELL-CVE-2023-21835BIT-java-2023-21835BIT-java-min-2023-21835
Show 51 moreShow less
BIT-jre-2023-21835DEBIAN-CVE-2023-21835DLA-3307-1DSA-5331-1DSA-5335-1EUVD-2023-26001GHSA-wqgc-h828-9g98MGASA-2023-0037OESA-2023-1600OESA-2023-1601OESA-2023-1602OESA-2023-1603OESA-2023-1617OESA-2023-1618OESA-2023-1650OESA-2023-1737OESA-2023-1738OESA-2023-1739RHSA-2023:0190RHSA-2023:0191RHSA-2023:0192RHSA-2023:0193RHSA-2023:0194RHSA-2023:0195RHSA-2023:0196RHSA-2023:0197RHSA-2023:0198RHSA-2023:0199RHSA-2023:0200RHSA-2023:0201RHSA-2023:0202RLSA-2023:0192RLSA-2023:0194RLSA-2023:0200RLSA-2023:0202SUSE-SU-2023:0435-1SUSE-SU-2023:0436-1SUSE-SU-2023:0752-1SUSE-SU-2023:1823-1SUSE-SU-2023:1850-1UBUNTU-CVE-2023-21835USN-5897-1openSUSE-SU-2024:12661-1openSUSE-SU-2024:12663-1openSUSE-SU-2024:12669-1openSUSE-SU-2024:12719-1openSUSE-SU-2024:12720-1openSUSE-SU-2024:12754-1openSUSE-SU-2024:12755-1openSUSE-SU-2025:0066-1openSUSE-SU-2025:0067-1

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DTLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: Low

Exploit likelihood

1.89%Up 1.0 points since Jan 18, 2023

What each source reports

CVE List Score used 5.3

Record: CVE-2023-21835
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

EUVDEUVD-2023-26001 5.3

Record: EUVD-2023-26001
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

GitHub AdvisoriesGHSA-wqgc-h828-9g98 5.3

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...

Record: GHSA-wqgc-h828-9g98
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

NVD 5.3

Record: CVE-2023-21835
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVALPINE-CVE-2023-21835 5.3

Record: ALPINE-CVE-2023-21835
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-03

OSVBELL-CVE-2023-21835 5.3

CVE-2023-21835 does not affect BellSoft software

Record: BELL-CVE-2023-21835
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

Show 45 moreShow less

OSV 5.3

Record: CVE-2023-21835
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-21835 5.3

Record: DEBIAN-CVE-2023-21835
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVOESA-2023-1600 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21830)

Record: OESA-2023-1600
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1601 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1601
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1602 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1602
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1603 5.9

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1603
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVOESA-2023-1617 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21843)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21937)

Record: OESA-2023-1617
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1618 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2023-21930)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1618
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1650 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1650
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1737 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1737
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1738 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1738
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1739 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1739
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:0190 5.3

Red Hat Security Advisory: java-17-openjdk security update

Record: RHSA-2023:0190
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0191 5.3

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2023:0191
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0192 5.3

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2023:0192
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0193 5.3

Red Hat Security Advisory: java-17-openjdk security update

Record: RHSA-2023:0193
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0194 5.3

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2023:0194
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0195 5.3

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2023:0195
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0196 5.3

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:0196
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0197 5.3

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:0197
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0198 5.3

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:0198
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0199 5.3

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:0199
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0200 5.3

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2023:0200
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0201 5.3

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:0201
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRHSA-2023:0202 5.3

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2023:0202
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRLSA-2023:0192 5.3

Moderate: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database. This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147473)
Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [Rocky Linux-8] (BZ#2153010)

Record: RLSA-2023:0192
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRLSA-2023:0194 5.3

Moderate: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database. This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147476)
Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [Rocky Linux-9] (BZ#2153097)

Record: RLSA-2023:0194
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRLSA-2023:0200 5.3

Moderate: java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [Rocky Linux-8] (BZ#2157797)

Record: RLSA-2023:0200
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVRLSA-2023:0202 5.3

Moderate: java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [Rocky Linux-9] (BZ#2157798)

Record: RLSA-2023:0202
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-21835 5.3

Record: UBUNTU-CVE-2023-21835
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated: 2026-11-02

OSVALSA-2023:0192 No score

Moderate: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database. This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147473)
Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [almalinux-8] (BZ#2153010)

Record: ALSA-2023:0192
Updated: 2026-11-02

OSVALSA-2023:0194 No score

Moderate: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

In FIPS mode, the use of a SQLite database provided by NSS was assumed, which was opened in read-only mode and with no PIN expected. This prevented the use of other databases or setting a PIN on the NSS database. This update allows more control over database use using two new properties - fips.nssdb.path and fips.nssdb.pin - which can be configured permanently in the java.security file or temporarily via command-line arguments to the Java virtual machine (RHBZ#2147476)
Prepare for the next quarterly OpenJDK upstream release (2023-01, 17.0.6) [almalinux-9] (BZ#2153097)

Record: ALSA-2023:0194
Updated: 2026-11-02

OSVALSA-2023:0200 No score

Moderate: java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-8] (BZ#2157797)

Record: ALSA-2023:0200
Updated: 2026-11-02

OSVALSA-2023:0202 No score

Moderate: java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835)
OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Prepare for the next quarterly OpenJDK upstream release (2023-01, 11.0.18) [almalinux-9] (BZ#2157798)

Record: ALSA-2023:0202
Updated: 2026-11-02

OSVBIT-java-2023-21835 No score

Record: BIT-java-2023-21835
Updated: 2026-11-02

OSVBIT-java-min-2023-21835 No score

Record: BIT-java-min-2023-21835
Updated: 2026-11-02

OSVBIT-jre-2023-21835 No score

Record: BIT-jre-2023-21835
Updated: 2026-11-02

OSVMGASA-2023-0037 No score

Updated java/timezone packages fix security vulnerability

Improper restrictions in CORBA deserialization. (CVE-2023-21830)

Handshake DoS attack against DTLS connections. (CVE-2023-21835)

Soundbank URL remote loading. (CVE-2023-21843)

Record: MGASA-2023-0037
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12661-1 No score

java-19-openjdk-19.0.2.0-1.1 on GA media

These are all security issues fixed in the java-19-openjdk-19.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12661-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12663-1 No score

java-11-openjdk-11.0.18.0-1.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.18.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12663-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12669-1 No score

java-17-openjdk-17.0.6.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12669-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12719-1 No score

java-13-openjdk-13.0.14.0-1.1 on GA media

These are all security issues fixed in the java-13-openjdk-13.0.14.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12719-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12720-1 No score

java-15-openjdk-15.0.10.0-1.1 on GA media

These are all security issues fixed in the java-15-openjdk-15.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12720-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12754-1 No score

java-11-openj9-11.0.18.0-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.18.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12754-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12755-1 No score

java-17-openj9-17.0.6.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12755-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`openjdk11` Alpine:v3.15	before 11.0.18_p10-r0	11.0.18_p10-r0
`openjdk11` Alpine:v3.16	before 11.0.18_p10-r0	11.0.18_p10-r0
`openjdk11` Alpine:v3.17	before 11.0.18_p10-r0	11.0.18_p10-r0
`openjdk11` Alpine:v3.18	before 11.0.18_p10-r0	11.0.18_p10-r0
`openjdk11` Alpine:v3.19	before 11.0.18_p10-r0	11.0.18_p10-r0
`openjdk11` Alpine:v3.20	before 11.0.18_p10-r0	11.0.18_p10-r0
`openjdk11` Alpine:v3.21	before 11.0.18_p10-r0	11.0.18_p10-r0
`openjdk11` Alpine:v3.22	before 11.0.18_p10-r0	11.0.18_p10-r0
`openjdk11` Alpine:v3.23	before 11.0.18_p10-r0	11.0.18_p10-r0
`openjdk11` Alpine:v3.24	before 11.0.18_p10-r0	11.0.18_p10-r0

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`openjdk17` Alpine:v3.15	before 17.0.6_p10-r0	17.0.6_p10-r0
`openjdk17` Alpine:v3.16	before 17.0.6_p10-r0	17.0.6_p10-r0
`openjdk17` Alpine:v3.17	before 17.0.6_p10-r0	17.0.6_p10-r0
`openjdk17` Alpine:v3.18	before 17.0.6_p10-r0	17.0.6_p10-r0
`openjdk17` Alpine:v3.19	before 17.0.6_p10-r0	17.0.6_p10-r0
`openjdk17` Alpine:v3.20	before 17.0.6_p10-r0	17.0.6_p10-r0
`openjdk17` Alpine:v3.21	before 17.0.6_p10-r0	17.0.6_p10-r0
`openjdk17` Alpine:v3.22	before 17.0.6_p10-r0	17.0.6_p10-r0
`openjdk17` Alpine:v3.23	before 17.0.6_p10-r0	17.0.6_p10-r0
`openjdk17` Alpine:v3.24	before 17.0.6_p10-r0	17.0.6_p10-r0
`openjdk19` Alpine:v3.19	before 19.0.2_p7-r0	19.0.2_p7-r0
`java-17-openjdk` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-demo` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-demo-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-demo-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-devel` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-devel-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-devel-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-headless` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-headless-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-headless-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-javadoc` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-javadoc-zip` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-jmods` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-jmods-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-jmods-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-src` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-src-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-src-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-static-libs` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-static-libs-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-static-libs-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-demo` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-headless` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-javadoc` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-jmods` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-src` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-static-libs` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-17-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-11-openjdk` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-demo` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-demo-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-demo-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-devel` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-devel-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-devel-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-headless` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-headless-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-headless-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-javadoc` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-javadoc-zip` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-jmods` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-jmods-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-jmods-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-src` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-src-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-src-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-static-libs` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-static-libs-fastdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk-static-libs-slowdebug` AlmaLinux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-demo` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-headless` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-javadoc` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-jmods` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-src` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-static-libs` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-11-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java` Bitnami	9.0.0 up to 11.0.18, 12.0.0 up to 17.0.5, 18.0.0 up to 19.0.2	11.0.1817.0.519.0.2
`java-min` Bitnami	9.0.0 up to 11.0.18, 12.0.0 up to 17.0.5, 18.0.0 up to 19.0.2	11.0.1817.0.519.0.2
`jre` Bitnami	9.0.0 up to 11.0.18, 12.0.0 up to 17.0.5, 18.0.0 up to 19.0.2	11.0.1817.0.519.0.2
`openjdk-17` Debian:12	before 17.0.6+10-1	17.0.6+10-1
`openjdk-21` Debian:13	before 21~7ea-1	21~7ea-1
`openjdk-21` Debian:14	before 21~7ea-1	21~7ea-1
`openjdk-11` Debian:10 From an advisory covering 7 CVEs	before 11.0.18+10-1~deb10u1, plus listed versions 11.0.10+8-111.0.10+9-111.0.11+3-111.0.11+3-211.0.11+3-3 Show 45 moreShow less 11.0.11+4-111.0.11+7-111.0.11+8-111.0.11+9-111.0.11+9-1~deb10u111.0.12+4-111.0.12+6-111.0.12+7-111.0.12+7-211.0.12+7-2~deb10u111.0.13+8-111.0.13+8-1~deb10u111.0.13+8-1~deb11u111.0.14+9-111.0.14+9-1~deb10u111.0.14+9-1~deb11u111.0.14.1+1-111.0.15+10-111.0.15+10-1~deb10u111.0.15+10-1~deb11u111.0.16+8-111.0.16+8-1~deb10u111.0.16+8-1~deb11u111.0.17+8-111.0.17+8-211.0.3+7-511.0.4+1-111.0.4+10-111.0.4+11-111.0.4+11-1~bpo9+111.0.4+11-1~deb10u111.0.4+2-111.0.4+4+really11.0.3+7-111.0.4+4+really11.0.3+7-211.0.4+4-111.0.4+6-111.0.4+8-111.0.4+9-111.0.5+10-111.0.5+10-1~bpo9+111.0.5+10-1~deb10u111.0.5+10-211.0.5+6-111.0.5+6-211.0.5+9-1	11.0.18+10-1~deb10u1
`openjdk-11` Debian:11 From an advisory covering 7 CVEs	before 11.0.18+10-1~deb11u1, plus listed versions 11.0.12+7-211.0.13+8-111.0.13+8-1~deb10u111.0.13+8-1~deb11u111.0.14+9-1 Show 12 moreShow less 11.0.14+9-1~deb10u111.0.14+9-1~deb11u111.0.14.1+1-111.0.15+10-111.0.15+10-1~deb10u111.0.15+10-1~deb11u111.0.16+8-111.0.16+8-1~deb10u111.0.16+8-1~deb11u111.0.17+8-111.0.17+8-211.0.18+10-1~deb10u1	11.0.18+10-1~deb11u1
`openjdk-17` Debian:11 From an advisory covering 7 CVEs	before 17.0.6+10-1~deb11u1, plus listed versions 17+35-117.0.1+12-117.0.1+12-1+deb11u117.0.1+12-1+deb11u217.0.2+8-1 Show 14 moreShow less 17.0.2+8-1~deb11u117.0.3+7-117.0.3+7-1~deb11u117.0.4+8-117.0.4+8-1~deb11u117.0.5+8-117.0.5+8-217~19-117~24-117~27-117~29-117~31ea-117~33ea-117~35ea-1	17.0.6+10-1~deb11u1
`java-1.8.0-openjdk` Mageia:8 From an advisory covering 3 CVEs	before 1.8.0.362.b09-1.mga8	1.8.0.362.b09-1.mga8
`java-11-openjdk` Mageia:8 From an advisory covering 3 CVEs	before 11.0.18.0.10-1.mga8	11.0.18.0.10-1.mga8
`timezone` Mageia:8 From an advisory covering 3 CVEs	before 2022g-1.mga8	2022g-1.mga8
`openjdk-latest` openEuler:20.03-LTS-SP3 From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-2.rolling.oe1	java-latest-openjdk-20.0.2.9-2.rolling.oe1
`openjdk-latest` openEuler:22.03-LTS From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-1.rolling.oe2203	java-latest-openjdk-20.0.2.9-1.rolling.oe2203
`openjdk-latest` openEuler:22.03-LTS-SP1 From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp1	java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp1
`openjdk-latest` openEuler:22.03-LTS-SP2 From an advisory covering 13 CVEs	before java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp2	java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp2
`openjdk-11` openEuler:22.03-LTS-SP1 From an advisory covering 14 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203sp1	java-11-openjdk-11.0.20.8-2.oe2203sp1
`openjdk-11` openEuler:22.03-LTS-SP2 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203sp2	java-11-openjdk-11.0.20.8-2.oe2203sp2
`openjdk-latest` openEuler:20.03-LTS-SP1 From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-2.rolling.oe1	java-latest-openjdk-20.0.2.9-2.rolling.oe1
`openjdk-11` openEuler:20.03-LTS-SP1 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe1	java-11-openjdk-11.0.20.8-2.oe1
`openjdk-11` openEuler:20.03-LTS-SP3 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe1	java-11-openjdk-11.0.20.8-2.oe1
`openjdk-11` openEuler:22.03-LTS From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203	java-11-openjdk-11.0.20.8-2.oe2203
`java-17-openjdk` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-debugsource` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-demo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-devel` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-devel-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-headless` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-headless-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-javadoc` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-javadoc-zip` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-jmods` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-src` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-static-libs` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-debugsource` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-demo-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-demo-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-devel-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-devel-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-devel-fastdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-devel-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-fastdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-headless-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-headless-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-headless-fastdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-headless-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-jmods-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-jmods-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-slowdebug-debuginfo` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-src-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-src-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-static-libs-fastdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk-static-libs-slowdebug` Red Hat:rhel_eus:8.6::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_6	1:17.0.6.0.10-2.el8_6
`java-17-openjdk` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-debuginfo` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-debugsource` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-demo` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-devel` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-devel-debuginfo` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-headless` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-headless-debuginfo` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-javadoc` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-javadoc-zip` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-jmods` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-src` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-static-libs` Red Hat:rhel_eus:8.4::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-debuginfo` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-debugsource` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-demo-fastdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-demo-slowdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-devel-debuginfo` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-devel-fastdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-devel-fastdebug-debuginfo` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-devel-slowdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-fastdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-fastdebug-debuginfo` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-headless-debuginfo` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-headless-fastdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-headless-fastdebug-debuginfo` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-headless-slowdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-jmods-fastdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-jmods-slowdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-slowdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-slowdebug-debuginfo` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-src-fastdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-src-slowdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-static-libs-fastdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk-static-libs-slowdebug` Red Hat:rhel_eus:8.4::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-2.el8_4	1:17.0.6.0.10-2.el8_4
`java-17-openjdk` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-demo` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-devel` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-devel-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-headless` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-headless-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-javadoc` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-javadoc-zip` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-jmods` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-src` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-static-libs` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk-demo-fastdebug` Red Hat:enterprise_linux:8::crb From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk` Rocky Linux:8 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el8_7	1:17.0.6.0.10-3.el8_7
`java-17-openjdk` Rocky Linux:9 From an advisory covering 2 CVEs	before 1:17.0.6.0.10-3.el9_1	1:17.0.6.0.10-3.el9_1
`java-11-openjdk` Rocky Linux:8 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el8_7	1:11.0.18.0.10-2.el8_7
`java-11-openjdk` Rocky Linux:9 From an advisory covering 2 CVEs	before 1:11.0.18.0.10-2.el9_1	1:11.0.18.0.10-2.el9_1
`java-17-openjdk` SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 2 CVEs	before 17.0.6.0-150400.3.12.1	17.0.6.0-150400.3.12.1
`java-17-openjdk` openSUSE:Leap 15.4 From an advisory covering 2 CVEs	before 17.0.6.0-150400.3.12.1	17.0.6.0-150400.3.12.1
`java-11-openjdk` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs	before 11.0.18.0-3.52.1	11.0.18.0-3.52.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs	before 11.0.18.0-3.52.1	11.0.18.0-3.52.1
`java-11-openjdk` SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise Module for Package Hub 15 SP4 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Manager Proxy 4.2 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Manager Server 4.2 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Enterprise Storage 7 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` SUSE:Enterprise Storage 7.1 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-11-openjdk` openSUSE:Leap 15.4 From an advisory covering 2 CVEs	before 11.0.18.0-150000.3.93.1	11.0.18.0-150000.3.93.1
`java-1_8_0-ibm` SUSE:OpenStack Cloud 9 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-30.105.1	1.8.0_sr8.0-30.105.1
`java-1_8_0-ibm` SUSE:OpenStack Cloud Crowbar 9 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-30.105.1	1.8.0_sr8.0-30.105.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-30.105.1	1.8.0_sr8.0-30.105.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-30.105.1	1.8.0_sr8.0-30.105.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 4 CVEs	before 1.8.0_sr8.0-30.105.1	1.8.0_sr8.0-30.105.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 12 SP4-ESPOS From an advisory covering 4 CVEs	before 1.8.0_sr8.0-30.105.1	1.8.0_sr8.0-30.105.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 4 CVEs	before 1.8.0_sr8.0-30.105.1	1.8.0_sr8.0-30.105.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-30.105.1	1.8.0_sr8.0-30.105.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-30.105.1	1.8.0_sr8.0-30.105.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Module for Legacy 15 SP4 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` SUSE:Enterprise Storage 7 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` SUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`java-1_8_0-ibm` openSUSE:Leap 15.4 From an advisory covering 4 CVEs	before 1.8.0_sr8.0-150000.3.71.1	1.8.0_sr8.0-150000.3.71.1
`openjdk-9` Ubuntu:16.04:LTS	All versions, plus listed versions 9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1	None known
`openjdk-17` Ubuntu:18.04:LTS	before 17.0.6+10-0ubuntu1~18.04.1, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.0417.0.5+8-2ubuntu1~18.04	17.0.6+10-0ubuntu1~18.04.1
`openjdk-lts` Ubuntu:18.04:LTS	before 11.0.18+10-0ubuntu1~18.04.1, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 22 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.04	11.0.18+10-0ubuntu1~18.04.1
`openjdk-17` Ubuntu:20.04:LTS	before 17.0.6+10-0ubuntu1~20.04.1, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.0417.0.5+8-2ubuntu1~20.04	17.0.6+10-0ubuntu1~20.04.1
`openjdk-lts` Ubuntu:20.04:LTS	before 11.0.18+10-0ubuntu1~20.04.1, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 13 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.04	11.0.18+10-0ubuntu1~20.04.1
`openjdk-13` Ubuntu:20.04:LTS	All versions, plus listed versions 13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04	None known
`openjdk-16` Ubuntu:20.04:LTS	All versions, plus listed versions 16.0.1+9-1~20.04	None known
`openjdk-17` Ubuntu:22.04:LTS	before 17.0.6+10-0ubuntu1~22.04, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.0417.0.5+8-2ubuntu1~22.04	17.0.6+10-0ubuntu1~22.04
`openjdk-18` Ubuntu:22.04:LTS	All versions, plus listed versions 18~15ea-418~20ea-118~32ea-118~36ea-118.0.2+9-2~22.04	None known
`openjdk-19` Ubuntu:22.04:LTS	before 19.0.2+7-0ubuntu3~22.04, plus listed versions 19.0.1+10-1ubuntu1~22.04	19.0.2+7-0ubuntu3~22.04
`openjdk-lts` Ubuntu:22.04:LTS	before 11.0.18+10-0ubuntu1~22.04, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.111.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.04	11.0.18+10-0ubuntu1~22.04
`openjdk-17` Ubuntu:18.04:LTS From an advisory covering 2 CVEs	before 17.0.6+10-0ubuntu1~18.04.1, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.0417.0.5+8-2ubuntu1~18.04	17.0.6+10-0ubuntu1~18.04.1
`openjdk-lts` Ubuntu:18.04:LTS From an advisory covering 2 CVEs	before 11.0.18+10-0ubuntu1~18.04.1, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 22 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.04	11.0.18+10-0ubuntu1~18.04.1
`openjdk-17` Ubuntu:20.04:LTS From an advisory covering 2 CVEs	before 17.0.6+10-0ubuntu1~20.04.1, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.0417.0.5+8-2ubuntu1~20.04	17.0.6+10-0ubuntu1~20.04.1
`openjdk-lts` Ubuntu:20.04:LTS From an advisory covering 2 CVEs	before 11.0.18+10-0ubuntu1~20.04.1, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 13 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.04	11.0.18+10-0ubuntu1~20.04.1
`openjdk-17` Ubuntu:22.04:LTS From an advisory covering 2 CVEs	before 17.0.6+10-0ubuntu1~22.04, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.0417.0.5+8-2ubuntu1~22.04	17.0.6+10-0ubuntu1~22.04
`openjdk-19` Ubuntu:22.04:LTS From an advisory covering 2 CVEs	before 19.0.2+7-0ubuntu3~22.04, plus listed versions 19.0.1+10-1ubuntu1~22.04	19.0.2+7-0ubuntu3~22.04
`openjdk-lts` Ubuntu:22.04:LTS From an advisory covering 2 CVEs	before 11.0.18+10-0ubuntu1~22.04, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.111.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.04	11.0.18+10-0ubuntu1~22.04
`java-19-openjdk` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 19.0.2.0-1.1	19.0.2.0-1.1
`java-11-openjdk` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 11.0.18.0-1.1	11.0.18.0-1.1
`java-17-openjdk` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 17.0.6.0-1.1	17.0.6.0-1.1
`java-13-openjdk` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 13.0.14.0-1.1	13.0.14.0-1.1
`java-15-openjdk` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 15.0.10.0-1.1	15.0.10.0-1.1
`java-11-openj9` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 11.0.18.0-1.1	11.0.18.0-1.1
`java-17-openj9` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 17.0.6.0-1.1	17.0.6.0-1.1
`java-11-openj9` SUSE:Package Hub 15 SP6 From an advisory covering 58 CVEs	before 11.0.26.0-bp156.4.3.1	11.0.26.0-bp156.4.3.1
`java-11-openj9` openSUSE:Leap 15.6 From an advisory covering 58 CVEs	before 11.0.26.0-bp156.4.3.1	11.0.26.0-bp156.4.3.1
`java-17-openj9` SUSE:Package Hub 15 SP6 From an advisory covering 47 CVEs	before 17.0.14.0-bp156.3.3.1	17.0.14.0-bp156.3.3.1
`java-17-openj9` openSUSE:Leap 15.6 From an advisory covering 47 CVEs	before 17.0.14.0-bp156.3.3.1	17.0.14.0-bp156.3.3.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected, aliases, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-21835 is a medium vulnerability (CVSS 5.3) in Oracle Graalvm, published January 17, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.89%, the 79th percentile. Fixed in openjdk11 11.0.18_p10-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 385 package rows, 18 versions, 62 references and the rest of 10 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 8 source records.