CVE-2023-21968

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...

3.7 LowFix available

What does this mean?

: 3.7v3.1, from CVE List
: 1.04%64th percentile
Fixed in: 11.0.19_p7-r0openjdk11
Published: April 18, 2023
Modified: November 3, 2026
Weakness: CWE-284
Also known as: ALPINE-CVE-2023-21968ALSA-2023:1879ALSA-2023:1880ALSA-2023:1895ALSA-2023:1898ALSA-2023:1908ALSA-2023:1909BELL-CVE-2023-21968
Show 77 moreShow less
BIT-java-2023-21968BIT-java-min-2023-21968BIT-jre-2023-21968CLSA-2023-1688674204CLSA-2023-1688676098CLSA-2023-1688677355CLSA-2023-1688679628CLSA-2023-1689009395DEBIAN-CVE-2023-21968DLA-3571-1DSA-5430-1DSA-5478-1EUVD-2023-26133GHSA-r6j2-4r52-mpg7MGASA-2023-0272OESA-2023-1600OESA-2023-1601OESA-2023-1602OESA-2023-1603OESA-2023-1617OESA-2023-1618OESA-2023-1642OESA-2023-1643OESA-2023-1644OESA-2023-1645OESA-2023-1646OESA-2023-1650OESA-2023-1737OESA-2023-1738OESA-2023-1739RHSA-2023:1875RHSA-2023:1877RHSA-2023:1878RHSA-2023:1879RHSA-2023:1880RHSA-2023:1889RHSA-2023:1890RHSA-2023:1891RHSA-2023:1892RHSA-2023:1895RHSA-2023:1898RHSA-2023:1899RHSA-2023:1900RHSA-2023:1904RHSA-2023:1905RHSA-2023:1906RHSA-2023:1907RHSA-2023:1908RHSA-2023:1909RHSA-2023:1910RHSA-2023:1911RHSA-2023:4103RHSA-2023:4160RLSA-2023:1879RLSA-2023:1880RLSA-2023:1895RLSA-2023:1898RLSA-2023:1909SUSE-SU-2023:2109-1SUSE-SU-2023:2110-1SUSE-SU-2023:2222-1SUSE-SU-2023:2238-1SUSE-SU-2023:2242-1SUSE-SU-2023:2242-2SUSE-SU-2023:2476-1SUSE-SU-2023:2491-1SUSE-SU-2023:3305-1UBUNTU-CVE-2023-21968USN-6077-1openSUSE-SU-2024:12891-1openSUSE-SU-2024:12892-1openSUSE-SU-2024:12909-1openSUSE-SU-2024:13110-1openSUSE-SU-2024:13130-1openSUSE-SU-2024:13131-1openSUSE-SU-2025:0066-1openSUSE-SU-2025:0067-1

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: None

Exploit likelihood

1.04%Up 1.0 points since Apr 19, 2023

What each source reports

CVE List Score used 3.7

Record: CVE-2023-21968
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-02

EUVDEUVD-2023-26133 3.7

Record: EUVD-2023-26133
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-r6j2-4r52-mpg7 3.7

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...

Record: GHSA-r6j2-4r52-mpg7
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-02

NVD 3.7

Record: CVE-2023-21968
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-284
Updated: 2026-11-02

OSVALPINE-CVE-2023-21968 3.7

Record: ALPINE-CVE-2023-21968
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-03

OSVBELL-CVE-2023-21968 3.7

CVE-2023-21968 does not affect BellSoft software

Record: BELL-CVE-2023-21968
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

Show 48 moreShow less

OSV 3.7

Record: CVE-2023-21968
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-21968 3.7

Record: DEBIAN-CVE-2023-21968
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVOESA-2023-1600 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21830)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DTLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-21835)

Record: OESA-2023-1600
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1601 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1601
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1602 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1602
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1603 5.9

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1603
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVOESA-2023-1617 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21843)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21937)

Record: OESA-2023-1617
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1618 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2023-21930)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1618
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1642 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1642
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1643 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1643
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1644 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1644
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1645 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1645
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1646 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1646
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1650 7.4

openjdk-latest security update

The OpenJDK runtime environment.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1650
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1737 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1737
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1738 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1738
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1739 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1739
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:1875 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:1875
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1877 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:1877
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1878 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:1878
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1879 7.4

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2023:1879
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1880 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:1880
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1889 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:1889
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1890 7.4

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2023:1890
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1891 7.4

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2023:1891
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1892 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:1892
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1895 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:1895
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1898 7.4

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2023:1898
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1899 7.4

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:1899
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1900 7.4

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2023:1900
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1904 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2023:1904
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1905 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:1905
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1906 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:1906
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1907 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:1907
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1908 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:1908
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1909 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2023:1909
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1910 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2023:1910
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:1911 7.4

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:1911
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVRHSA-2023:4103 8.1

Red Hat Security Advisory: java-1.8.0-ibm security update

Record: RHSA-2023:4103
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:4160 8.1

Red Hat Security Advisory: java-1.8.0-ibm security update

Record: RHSA-2023:4160
CVSS 3.1: 8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-21968 3.7

Record: UBUNTU-CVE-2023-21968
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVALSA-2023:1879 No score

Important: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186804)
Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186811)
The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186807)

Record: ALSA-2023:1879
Updated: 2026-11-02

OSVALSA-2023:1880 No score

Important: java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2023:1880
Updated: 2026-11-02

OSVALSA-2023:1895 No score

Important: java-11-openjdk security update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2023:1895
Updated: 2026-11-02

OSVALSA-2023:1898 No score

Important: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

In FIPS mode, the list of cryptographic services and algorithms available is limited to those that are FIPS compliant. It was found that this filtering was too strict and was also excluding service attributes. These attributes are now made available in FIPS mode, as they are in non-FIPS mode. (RHBZ#2186835)
Previously, the XML signature provider was unable to operate in FIPS mode. Following recent enhancements to FIPS mode support, the XML signature provider can now be supported. It is now enabled in FIPS mode. (RHBZ#2186827)
The PKCS#11 provider used by FIPS mode can be supported by different PKCS#11 tokens. It was found that some PKCS#11 tokens may not be initialised fully before use, leading to an exception being thrown by the provider. With this release, this exception is now expected and handled by the FIPS support code. (RHBZ#2186831)

Record: ALSA-2023:1898
Updated: 2026-11-02

OSVALSA-2023:1908 No score

Important: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2023:1908
Updated: 2026-11-02

OSVALSA-2023:1909 No score

Important: java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930)
OpenJDK: Swing HTML parsing issue (8296832) (CVE-2023-21939)
OpenJDK: incorrect enqueue of references in garbage collector (8298191) (CVE-2023-21954)
OpenJDK: certificate validation issue in TLS session negotiation (8298310) (CVE-2023-21967)
OpenJDK: missing string checks for NULL characters (8296622) (CVE-2023-21937)
OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) (CVE-2023-21938)
OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) (CVE-2023-21968)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

The RSAPSSSignature implementation works with RSA keys via the SunRSASign provider. However, it did not fully check that the RSA key could be used by the provider before attempting to do so, leading to the possibility of errors being returned with custom security providers. The implementation now validates RSA keys and will allow other providers to handle such keys where it cannot. (RHBZ#2188024)

Record: ALSA-2023:1909
Updated: 2026-11-02

OSVBIT-java-2023-21968 No score

Record: BIT-java-2023-21968
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`openjdk11` Alpine:v3.15	before 11.0.19_p7-r0	11.0.19_p7-r0
`openjdk11` Alpine:v3.16	before 11.0.19_p7-r0	11.0.19_p7-r0
`openjdk11` Alpine:v3.17	before 11.0.19_p7-r0	11.0.19_p7-r0
`openjdk11` Alpine:v3.18	before 11.0.19_p7-r0	11.0.19_p7-r0
`openjdk11` Alpine:v3.19	before 11.0.19_p7-r0	11.0.19_p7-r0
`openjdk11` Alpine:v3.20	before 11.0.19_p7-r0	11.0.19_p7-r0
`openjdk11` Alpine:v3.21	before 11.0.19_p7-r0	11.0.19_p7-r0
`openjdk11` Alpine:v3.22	before 11.0.19_p7-r0	11.0.19_p7-r0
`openjdk11` Alpine:v3.23	before 11.0.19_p7-r0	11.0.19_p7-r0
`openjdk11` Alpine:v3.24	before 11.0.19_p7-r0	11.0.19_p7-r0

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`openjdk17` Alpine:v3.15	before 17.0.7_p7-r0	17.0.7_p7-r0
`openjdk17` Alpine:v3.16	before 17.0.7_p7-r0	17.0.7_p7-r0
`openjdk17` Alpine:v3.17	before 17.0.7_p7-r0	17.0.7_p7-r0
`openjdk17` Alpine:v3.18	before 17.0.7_p7-r0	17.0.7_p7-r0
`openjdk17` Alpine:v3.19	before 17.0.7_p7-r0	17.0.7_p7-r0
`openjdk17` Alpine:v3.20	before 17.0.7_p7-r0	17.0.7_p7-r0
`openjdk17` Alpine:v3.21	before 17.0.7_p7-r0	17.0.7_p7-r0
`openjdk17` Alpine:v3.22	before 17.0.7_p7-r0	17.0.7_p7-r0
`openjdk17` Alpine:v3.23	before 17.0.7_p7-r0	17.0.7_p7-r0
`openjdk17` Alpine:v3.24	before 17.0.7_p7-r0	17.0.7_p7-r0
`openjdk20` Alpine:v3.19	before 20.0.1_p9-r0	20.0.1_p9-r0
`openjdk8` Alpine:v3.15	before 8.372.07-r0	8.372.07-r0
`openjdk8` Alpine:v3.16	before 8.372.07-r0	8.372.07-r0
`openjdk8` Alpine:v3.17	before 8.372.07-r0	8.372.07-r0
`openjdk8` Alpine:v3.18	before 8.372.07-r0	8.372.07-r0
`openjdk8` Alpine:v3.19	before 8.372.07-r0	8.372.07-r0
`openjdk8` Alpine:v3.20	before 8.372.07-r0	8.372.07-r0
`openjdk8` Alpine:v3.21	before 8.372.07-r0	8.372.07-r0
`openjdk8` Alpine:v3.22	before 8.372.07-r0	8.372.07-r0
`openjdk8` Alpine:v3.23	before 8.372.07-r0	8.372.07-r0
`openjdk8` Alpine:v3.24	before 8.372.07-r0	8.372.07-r0
`java-17-openjdk` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-demo` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-headless` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-javadoc` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-jmods` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-src` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-static-libs` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-17-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-11-openjdk` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-demo` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-devel` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-headless` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-javadoc` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-jmods` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-src` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-static-libs` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_7	1:11.0.19.0.7-1.el8_7
`java-11-openjdk-demo` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_7	1:11.0.19.0.7-1.el8_7
`java-11-openjdk-demo-fastdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_7	1:11.0.19.0.7-1.el8_7
`java` Bitnami	before 1.8.0, 1.9.0 up to 8.0.371, 9.0.0 up to 11.0.19, 12.0.0 up to 17.0.7, 18.0.0 up to 20.0.1	1.8.08.0.37111.0.1917.0.720.0.1
`java-min` Bitnami	before 1.8.0, 1.9.0 up to 8.0.371, 9.0.0 up to 11.0.19, 12.0.0 up to 17.0.7, 18.0.0 up to 20.0.1	1.8.08.0.37111.0.1917.0.720.0.1
`jre` Bitnami	before 1.8.0, 1.9.0 up to 8.0.371, 9.0.0 up to 11.0.19, 12.0.0 up to 17.0.7, 18.0.0 up to 20.0.1	1.8.08.0.37111.0.1917.0.720.0.1
`java-1.8.0-openjdk` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc-zip` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc-zip` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el8.tuxcare.els1	1:1.8.0.372.b07-1.el8.tuxcare.els1
`java-1.8.0-openjdk` TuxCare:OracleLinux:6 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el6.tuxcare.els1	1:1.8.0.372.b07-1.el6.tuxcare.els1
`java-1.8.0-openjdk-debug` TuxCare:OracleLinux:6 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el6.tuxcare.els1	1:1.8.0.372.b07-1.el6.tuxcare.els1
`java-1.8.0-openjdk-demo` TuxCare:OracleLinux:6 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el6.tuxcare.els1	1:1.8.0.372.b07-1.el6.tuxcare.els1
`java-1.8.0-openjdk-demo-debug` TuxCare:OracleLinux:6 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el6.tuxcare.els1	1:1.8.0.372.b07-1.el6.tuxcare.els1
`java-1.8.0-openjdk-devel` TuxCare:OracleLinux:6 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el6.tuxcare.els1	1:1.8.0.372.b07-1.el6.tuxcare.els1
`java-1.8.0-openjdk-devel-debug` TuxCare:OracleLinux:6 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el6.tuxcare.els1	1:1.8.0.372.b07-1.el6.tuxcare.els1
`java-1.8.0-openjdk-headless` TuxCare:OracleLinux:6 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el6.tuxcare.els1	1:1.8.0.372.b07-1.el6.tuxcare.els1
`java-1.8.0-openjdk-headless-debug` TuxCare:OracleLinux:6 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el6.tuxcare.els1	1:1.8.0.372.b07-1.el6.tuxcare.els1
`java-1.8.0-openjdk-javadoc` TuxCare:OracleLinux:6 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el6.tuxcare.els1	1:1.8.0.372.b07-1.el6.tuxcare.els1
`openjdk-17` Debian:12	before 17.0.7+7-1~deb12u1, plus listed versions 17.0.6+10-117.0.7+7-1~deb11u1	17.0.7+7-1~deb12u1
`openjdk-11` Debian:10 From an advisory covering 12 CVEs	before 11.0.20+8-1~deb10u1, plus listed versions 11.0.10+8-111.0.10+9-111.0.11+3-111.0.11+3-211.0.11+3-3 Show 45 moreShow less 11.0.11+4-111.0.11+7-111.0.11+8-111.0.11+9-111.0.11+9-1~deb10u111.0.12+4-111.0.12+6-111.0.12+7-111.0.12+7-211.0.12+7-2~deb10u111.0.13+8-111.0.13+8-1~deb10u111.0.13+8-1~deb11u111.0.14+9-111.0.14+9-1~deb10u111.0.14+9-1~deb11u111.0.14.1+1-111.0.15+10-111.0.15+10-1~deb10u111.0.15+10-1~deb11u111.0.16+8-111.0.16+8-1~deb10u111.0.16+8-1~deb11u111.0.17+8-111.0.17+8-211.0.18+10-111.0.18+10-1~deb10u111.0.18+10-1~deb11u111.0.19+7+really11.0.11+9-1+b211.0.19+7-111.0.20~7-111.0.3+7-511.0.4+1-111.0.4+10-111.0.4+11-111.0.4+11-1~bpo9+111.0.4+11-1~deb10u111.0.4+2-111.0.4+4+really11.0.3+7-111.0.4+4+really11.0.3+7-211.0.4+4-111.0.4+6-111.0.4+8-111.0.4+9-111.0.5+10-1	11.0.20+8-1~deb10u1
`openjdk-17` Debian:11 From an advisory covering 7 CVEs	before 17.0.7+7-1~deb11u1, plus listed versions 17+35-117.0.1+12-117.0.1+12-1+deb11u117.0.1+12-1+deb11u217.0.2+8-1 Show 16 moreShow less 17.0.2+8-1~deb11u117.0.3+7-117.0.3+7-1~deb11u117.0.4+8-117.0.4+8-1~deb11u117.0.5+8-117.0.5+8-217.0.6+10-117.0.6+10-1~deb11u117~19-117~24-117~27-117~29-117~31ea-117~33ea-117~35ea-1	17.0.7+7-1~deb11u1
`openjdk-17` Debian:12 From an advisory covering 7 CVEs	before 17.0.7+7-1~deb12u1, plus listed versions 17.0.6+10-117.0.7+7-1~deb11u1	17.0.7+7-1~deb12u1
`openjdk-11` Debian:11 From an advisory covering 12 CVEs	before 11.0.20+8-1~deb11u1, plus listed versions 11.0.12+7-211.0.13+8-111.0.13+8-1~deb10u111.0.13+8-1~deb11u111.0.14+9-1 Show 18 moreShow less 11.0.14+9-1~deb10u111.0.14+9-1~deb11u111.0.14.1+1-111.0.15+10-111.0.15+10-1~deb10u111.0.15+10-1~deb11u111.0.16+8-111.0.16+8-1~deb10u111.0.16+8-1~deb11u111.0.17+8-111.0.17+8-211.0.18+10-111.0.18+10-1~deb10u111.0.18+10-1~deb11u111.0.19+7+really11.0.11+9-1+b211.0.19+7-111.0.20+8-1~deb10u111.0.20~7-1	11.0.20+8-1~deb11u1
`java-1.8.0-openjdk` Mageia:8 From an advisory covering 14 CVEs	before 1.8.0.382.b05-1.mga8	1.8.0.382.b05-1.mga8
`java-11-openjdk` Mageia:8 From an advisory covering 14 CVEs	before 11.0.20.0.8-1.mga8	11.0.20.0.8-1.mga8
`openjfx` Mageia:8 From an advisory covering 14 CVEs	before 11.0.9.2-4.mga8	11.0.9.2-4.mga8
`java-1.8.0-openjdk` Mageia:9 From an advisory covering 14 CVEs	before 1.8.0.382.b05-1.mga9	1.8.0.382.b05-1.mga9
`java-11-openjdk` Mageia:9 From an advisory covering 14 CVEs	before 11.0.20.0.8-1.mga9	11.0.20.0.8-1.mga9
`java-17-openjdk` Mageia:9 From an advisory covering 14 CVEs	before 17.0.8.0.7-1.mga9	17.0.8.0.7-1.mga9
`java-latest-openjdk` Mageia:9 From an advisory covering 14 CVEs	before 20.0.2.0.9-1.rolling.2.mga9	20.0.2.0.9-1.rolling.2.mga9
`openjdk-latest` openEuler:20.03-LTS-SP3 From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-2.rolling.oe1	java-latest-openjdk-20.0.2.9-2.rolling.oe1
`openjdk-latest` openEuler:22.03-LTS From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-1.rolling.oe2203	java-latest-openjdk-20.0.2.9-1.rolling.oe2203
`openjdk-latest` openEuler:22.03-LTS-SP1 From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp1	java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp1
`openjdk-latest` openEuler:22.03-LTS-SP2 From an advisory covering 13 CVEs	before java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp2	java-latest-openjdk-20.0.2.9-1.rolling.oe2203sp2
`openjdk-11` openEuler:22.03-LTS-SP1 From an advisory covering 14 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203sp1	java-11-openjdk-11.0.20.8-2.oe2203sp1
`openjdk-11` openEuler:22.03-LTS-SP2 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203sp2	java-11-openjdk-11.0.20.8-2.oe2203sp2
`openjdk-1.8.0` openEuler:20.03-LTS-SP1 From an advisory covering 13 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-7.oe1	java-1.8.0-openjdk-1.8.0.382.b05-7.oe1
`openjdk-1.8.0` openEuler:20.03-LTS-SP3 From an advisory covering 13 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-7.oe1	java-1.8.0-openjdk-1.8.0.382.b05-7.oe1
`openjdk-1.8.0` openEuler:22.03-LTS From an advisory covering 13 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203	java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203
`openjdk-1.8.0` openEuler:22.03-LTS-SP1 From an advisory covering 12 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp1	java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp1
`openjdk-1.8.0` openEuler:22.03-LTS-SP2 From an advisory covering 12 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp2	java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp2
`openjdk-latest` openEuler:20.03-LTS-SP1 From an advisory covering 15 CVEs	before java-latest-openjdk-20.0.2.9-2.rolling.oe1	java-latest-openjdk-20.0.2.9-2.rolling.oe1
`openjdk-11` openEuler:20.03-LTS-SP1 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe1	java-11-openjdk-11.0.20.8-2.oe1
`openjdk-11` openEuler:20.03-LTS-SP3 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe1	java-11-openjdk-11.0.20.8-2.oe1
`openjdk-11` openEuler:22.03-LTS From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203	java-11-openjdk-11.0.20.8-2.oe2203
`java-11-openjdk` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-headless` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-demo` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-devel` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-javadoc` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-javadoc-zip` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-jmods` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-src` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-static-libs` Red Hat:enterprise_linux:7::client From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-demo` Red Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-devel` Red Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-javadoc` Red Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-javadoc-zip` Red Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-jmods` Red Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-src` Red Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-static-libs` Red Hat:enterprise_linux:7::computenode From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-devel` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-headless` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-demo` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-javadoc` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-javadoc-zip` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-jmods` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-src` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-static-libs` Red Hat:enterprise_linux:7::server From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-devel` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-headless` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-demo` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-javadoc` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-javadoc-zip` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-jmods` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-src` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk-static-libs` Red Hat:enterprise_linux:7::workstation From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el7_9	1:11.0.19.0.7-1.el7_9
`java-11-openjdk` Red Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_2	1:11.0.19.0.7-1.el8_2
`java-11-openjdk-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_2	1:11.0.19.0.7-1.el8_2
`java-11-openjdk-debugsource` Red Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_2	1:11.0.19.0.7-1.el8_2
`java-11-openjdk-demo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_2	1:11.0.19.0.7-1.el8_2
`java-11-openjdk-devel` Red Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_2	1:11.0.19.0.7-1.el8_2
`java-11-openjdk-devel-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_2	1:11.0.19.0.7-1.el8_2
`java-11-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_2	1:11.0.19.0.7-1.el8_2
`java-11-openjdk-headless` Red Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_2	1:11.0.19.0.7-1.el8_2
`java-11-openjdk-headless-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_2	1:11.0.19.0.7-1.el8_2
`java-11-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_2	1:11.0.19.0.7-1.el8_2
`java-17-openjdk` Rocky Linux:9 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el9_1	1:17.0.7.0.7-1.el9_1
`java-11-openjdk` Rocky Linux:9 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el9_1	1:11.0.19.0.7-1.el9_1
`java-11-openjdk` Rocky Linux:8 From an advisory covering 7 CVEs	before 1:11.0.19.0.7-1.el8_7	1:11.0.19.0.7-1.el8_7
`java-17-openjdk` Rocky Linux:8 From an advisory covering 7 CVEs	before 1:17.0.7.0.7-1.el8_7	1:17.0.7.0.7-1.el8_7
`java-1.8.0-openjdk` Rocky Linux:9 From an advisory covering 7 CVEs	before 1:1.8.0.372.b07-1.el9_1	1:1.8.0.372.b07-1.el9_1
`java-11-openjdk` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 7 CVEs	before 11.0.19.0-3.58.2	11.0.19.0-3.58.2
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 7 CVEs	before 11.0.19.0-3.58.2	11.0.19.0-3.58.2
`java-17-openjdk` SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 7 CVEs	before 17.0.7.0-150400.3.18.2	17.0.7.0-150400.3.18.2
`java-17-openjdk` openSUSE:Leap 15.4 From an advisory covering 7 CVEs	before 17.0.7.0-150400.3.18.2	17.0.7.0-150400.3.18.2
`java-11-openjdk` SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise Module for Package Hub 15 SP4 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Manager Proxy 4.2 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Manager Server 4.2 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Enterprise Storage 7 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` SUSE:Enterprise Storage 7.1 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-11-openjdk` openSUSE:Leap 15.4 From an advisory covering 7 CVEs	before 11.0.19.0-150000.3.96.1	11.0.19.0-150000.3.96.1
`java-1_8_0-openjdk` SUSE:OpenStack Cloud 9 From an advisory covering 7 CVEs	before 1.8.0.372-27.87.1	1.8.0.372-27.87.1
`java-1_8_0-openjdk` SUSE:OpenStack Cloud Crowbar 9 From an advisory covering 7 CVEs	before 1.8.0.372-27.87.1	1.8.0.372-27.87.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 7 CVEs	before 1.8.0.372-27.87.1	1.8.0.372-27.87.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 7 CVEs	before 1.8.0.372-27.87.1	1.8.0.372-27.87.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 12 SP4-ESPOS From an advisory covering 7 CVEs	before 1.8.0.372-27.87.1	1.8.0.372-27.87.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 7 CVEs	before 1.8.0.372-27.87.1	1.8.0.372-27.87.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 7 CVEs	before 1.8.0.372-27.87.1	1.8.0.372-27.87.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 7 CVEs	before 1.8.0.372-27.87.1	1.8.0.372-27.87.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Module for Legacy 15 SP4 From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Enterprise Storage 7 From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Enterprise Storage 7.1 From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` openSUSE:Leap 15.4 From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-openjdk` openSUSE:Leap 15.5 From an advisory covering 7 CVEs	before 1.8.0.372-150000.3.79.1	1.8.0.372-150000.3.79.1
`java-1_8_0-ibm` SUSE:OpenStack Cloud 9 From an advisory covering 9 CVEs	before 1.8.0_sr8.5-30.108.1	1.8.0_sr8.5-30.108.1
`java-1_8_0-ibm` SUSE:OpenStack Cloud Crowbar 9 From an advisory covering 9 CVEs	before 1.8.0_sr8.5-30.108.1	1.8.0_sr8.5-30.108.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 9 CVEs	before 1.8.0_sr8.5-30.108.1	1.8.0_sr8.5-30.108.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 9 CVEs	before 1.8.0_sr8.5-30.108.1	1.8.0_sr8.5-30.108.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 9 CVEs	before 1.8.0_sr8.5-30.108.1	1.8.0_sr8.5-30.108.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 12 SP4-ESPOS From an advisory covering 9 CVEs	before 1.8.0_sr8.5-30.108.1	1.8.0_sr8.5-30.108.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 9 CVEs	before 1.8.0_sr8.5-30.108.1	1.8.0_sr8.5-30.108.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 9 CVEs	before 1.8.0_sr8.5-30.108.1	1.8.0_sr8.5-30.108.1
`java-1_8_0-ibm` openSUSE:Leap 15.4 From an advisory covering 9 CVEs	before 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1
`java-1_8_0-ibm` openSUSE:Leap 15.5 From an advisory covering 9 CVEs	before 1.8.0_sr8.5-150000.3.74.1	1.8.0_sr8.5-150000.3.74.1
`java-1_8_0-openj9` openSUSE:Leap 15.4 From an advisory covering 8 CVEs	before 1.8.0.372-150200.3.33.2	1.8.0.372-150200.3.33.2
`java-1_8_0-openj9` openSUSE:Leap 15.5 From an advisory covering 8 CVEs	before 1.8.0.372-150200.3.33.2	1.8.0.372-150200.3.33.2
`openjdk-8` Ubuntu:Pro:16.04:LTS	before 8u372-ga~us1-0ubuntu1~16.04, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 35 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.1	8u372-ga~us1-0ubuntu1~16.04
`openjdk-9` Ubuntu:16.04:LTS	All versions, plus listed versions 9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1	None known
`openjdk-17` Ubuntu:18.04:LTS	before 17.0.7+7~us1-0ubuntu1~18.04, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.0417.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.1	17.0.7+7~us1-0ubuntu1~18.04
`openjdk-8` Ubuntu:18.04:LTS	before 8u372-ga~us1-0ubuntu1~18.04, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 17 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.1	8u372-ga~us1-0ubuntu1~18.04
`openjdk-lts` Ubuntu:18.04:LTS	before 11.0.19+7~us1-0ubuntu1~18.04.1, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 23 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.1	11.0.19+7~us1-0ubuntu1~18.04.1
`openjdk-17` Ubuntu:20.04:LTS	before 17.0.7+7~us1-0ubuntu1~20.04, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.0417.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.1	17.0.7+7~us1-0ubuntu1~20.04
`openjdk-8` Ubuntu:20.04:LTS	before 8u372-ga~us1-0ubuntu1~20.04, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 10 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.1	8u372-ga~us1-0ubuntu1~20.04
`openjdk-lts` Ubuntu:20.04:LTS	before 11.0.19+7~us1-0ubuntu1~20.04.1, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 14 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.1	11.0.19+7~us1-0ubuntu1~20.04.1
`openjdk-13` Ubuntu:20.04:LTS	All versions, plus listed versions 13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04	None known
`openjdk-16` Ubuntu:20.04:LTS	All versions, plus listed versions 16.0.1+9-1~20.04	None known
`openjdk-17` Ubuntu:22.04:LTS	before 17.0.7+7~us1-0ubuntu1~22.04.2, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.0417.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.04	17.0.7+7~us1-0ubuntu1~22.04.2
`openjdk-18` Ubuntu:22.04:LTS	All versions, plus listed versions 18~15ea-418~20ea-118~32ea-118~36ea-118.0.2+9-2~22.04	None known
`openjdk-8` Ubuntu:22.04:LTS	before 8u372-ga~us1-0ubuntu1~22.04, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04	8u372-ga~us1-0ubuntu1~22.04
`openjdk-lts` Ubuntu:22.04:LTS	before 11.0.19+7~us1-0ubuntu1~22.04.1, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.111.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.04	11.0.19+7~us1-0ubuntu1~22.04.1
`openjdk-8` Ubuntu:Pro:16.04:LTS From an advisory covering 7 CVEs	before 8u372-ga~us1-0ubuntu1~16.04, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 35 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.1	8u372-ga~us1-0ubuntu1~16.04
`openjdk-17` Ubuntu:18.04:LTS From an advisory covering 7 CVEs	before 17.0.7+7~us1-0ubuntu1~18.04, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.0417.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.1	17.0.7+7~us1-0ubuntu1~18.04
`openjdk-8` Ubuntu:18.04:LTS From an advisory covering 7 CVEs	before 8u372-ga~us1-0ubuntu1~18.04, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 17 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.1	8u372-ga~us1-0ubuntu1~18.04
`openjdk-lts` Ubuntu:18.04:LTS From an advisory covering 7 CVEs	before 11.0.19+7~us1-0ubuntu1~18.04.1, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 23 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.1	11.0.19+7~us1-0ubuntu1~18.04.1
`openjdk-17` Ubuntu:20.04:LTS From an advisory covering 7 CVEs	before 17.0.7+7~us1-0ubuntu1~20.04, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.0417.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.1	17.0.7+7~us1-0ubuntu1~20.04
`openjdk-8` Ubuntu:20.04:LTS From an advisory covering 7 CVEs	before 8u372-ga~us1-0ubuntu1~20.04, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 10 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.1	8u372-ga~us1-0ubuntu1~20.04
`openjdk-lts` Ubuntu:20.04:LTS From an advisory covering 7 CVEs	before 11.0.19+7~us1-0ubuntu1~20.04.1, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 14 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.1	11.0.19+7~us1-0ubuntu1~20.04.1
`openjdk-17` Ubuntu:22.04:LTS From an advisory covering 7 CVEs	before 17.0.7+7~us1-0ubuntu1~22.04.2, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.0417.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.04	17.0.7+7~us1-0ubuntu1~22.04.2
`openjdk-8` Ubuntu:22.04:LTS From an advisory covering 7 CVEs	before 8u372-ga~us1-0ubuntu1~22.04, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.04	8u372-ga~us1-0ubuntu1~22.04
`openjdk-lts` Ubuntu:22.04:LTS From an advisory covering 7 CVEs	before 11.0.19+7~us1-0ubuntu1~22.04.1, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.111.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.04	11.0.19+7~us1-0ubuntu1~22.04.1
`java-11-openjdk` openSUSE:Tumbleweed From an advisory covering 7 CVEs	before 11.0.19.0-1.1	11.0.19.0-1.1
`java-17-openjdk` openSUSE:Tumbleweed From an advisory covering 7 CVEs	before 17.0.7.0-1.1	17.0.7.0-1.1
`java-1_8_0-openjdk` openSUSE:Tumbleweed From an advisory covering 7 CVEs	before 1.8.0.372-1.1	1.8.0.372-1.1
`java-1_8_0-openj9` openSUSE:Tumbleweed From an advisory covering 5 CVEs	before 1.8.0.372-1.1	1.8.0.372-1.1
`java-11-openj9` openSUSE:Tumbleweed From an advisory covering 8 CVEs	before 11.0.20.0-1.1	11.0.20.0-1.1
`java-17-openj9` openSUSE:Tumbleweed From an advisory covering 9 CVEs	before 17.0.8.0-1.1	17.0.8.0-1.1
`java-11-openj9` openSUSE:Leap 15.6 From an advisory covering 58 CVEs	before 11.0.26.0-bp156.4.3.1	11.0.26.0-bp156.4.3.1
`java-17-openj9` openSUSE:Leap 15.6 From an advisory covering 47 CVEs	before 17.0.14.0-bp156.3.3.1	17.0.14.0-bp156.3.3.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected, aliases, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-21968 is a low vulnerability (CVSS 3.7) in Oracle Graalvm, published April 18, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.04%, the 64th percentile. Fixed in openjdk11 11.0.19_p7-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 850 package rows, 24 versions, 150 references and the rest of 15 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 34 source records.