CVE-2023-22049

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK...

3.7 LowFix available

What does this mean?

: 3.7v3.1, from CVE List
: 1.46%73rd percentile
Fixed in: 11.0.20_p8-r0openjdk11
Published: July 18, 2023
Modified: November 3, 2026
Also known as: ALPINE-CVE-2023-22049ALSA-2023:4158ALSA-2023:4159ALSA-2023:4175ALSA-2023:4176ALSA-2023:4177ALSA-2023:4178BELL-CVE-2023-22049
Show 68 moreShow less
BIT-java-2023-22049BIT-java-min-2023-22049BIT-jre-2023-22049CLSA-2023-1691081102CLSA-2023-1691081362CLSA-2023-1691081639CLSA-2023-1691081846CLSA-2023-1698101945CLSA-2023-1700593371CLSA-2023-1703610997DEBIAN-CVE-2023-22049DLA-3571-1DSA-5458-1DSA-5478-1EUVD-2023-26214GHSA-vp7m-m4v3-gxc5MGASA-2023-0272OESA-2023-1617OESA-2023-1618OESA-2023-1642OESA-2023-1643OESA-2023-1644OESA-2023-1645OESA-2023-1646OESA-2023-1737OESA-2023-1738OESA-2023-1739RHSA-2023:4157RHSA-2023:4158RHSA-2023:4159RHSA-2023:4162RHSA-2023:4163RHSA-2023:4164RHSA-2023:4165RHSA-2023:4166RHSA-2023:4167RHSA-2023:4168RHSA-2023:4169RHSA-2023:4170RHSA-2023:4171RHSA-2023:4172RHSA-2023:4173RHSA-2023:4174RHSA-2023:4175RHSA-2023:4176RHSA-2023:4177RHSA-2023:4178RHSA-2023:4233RHSA-2023:4876RHSA-2023:4877RLSA-2023:4176RLSA-2023:4178SUSE-SU-2023:2990-1SUSE-SU-2023:3023-1SUSE-SU-2023:3287-1SUSE-SU-2023:3332-1SUSE-SU-2023:3406-1SUSE-SU-2023:3441-1SUSE-SU-2023:3442-1SUSE-SU-2023:3443-1UBUNTU-CVE-2023-22049USN-6263-1openSUSE-SU-2024:13075-1openSUSE-SU-2024:13076-1openSUSE-SU-2024:13084-1openSUSE-SU-2024:13130-1openSUSE-SU-2025:0066-1openSUSE-SU-2025:0067-1

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u371, 8u371-perf, 11.0.19, 17.0.7, 20.0.1; Oracle GraalVM Enterprise Edition: 20.3.10, 21.3.6, 22.3.2; Oracle GraalVM for JDK: 17.0.7 and 20.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: None

Exploit likelihood

1.46%Up 1.4 points since Jul 19, 2023

What each source reports

CVE List Score used 3.7

Record: CVE-2023-22049
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

EUVDEUVD-2023-26214 3.7

Record: EUVD-2023-26214
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-vp7m-m4v3-gxc5 3.7

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK...

Record: GHSA-vp7m-m4v3-gxc5
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

NVD 3.7

Record: CVE-2023-22049
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVALPINE-CVE-2023-22049 3.7

Record: ALPINE-CVE-2023-22049
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-03

OSVBELL-CVE-2023-22049 3.7

CVE-2023-22049 does not affect BellSoft software

Record: BELL-CVE-2023-22049
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

Show 48 moreShow less

OSV 3.7

Record: CVE-2023-22049
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-22049 3.7

Record: DEBIAN-CVE-2023-22049
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVOESA-2023-1617 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DTLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-21835)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21843)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21937)

Record: OESA-2023-1617
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1618 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2023-21930)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1618
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1642 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2022-21549)

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf; Oracle GraalVM Enterprise Edition: 20.3.8 and 21.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-21830)

Record: OESA-2023-1642
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1643 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1643
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1644 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1644
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1645 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1645
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1646 7.4

openjdk-1.8.0 security update

The OpenJDK runtime environment 8.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Record: OESA-2023-1646
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated: 2026-11-02

OSVOESA-2023-1737 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1737
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1738 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1738
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1739 7.5

openjdk-11 security update

The OpenJDK runtime environment.

Security Fix(es):

An issue was discovered in function ciMethodBlocks::make_block_at in Oracle JDK (HotSpot VM) 11, 17 and OpenJDK (HotSpot VM) 8, 11, 17, allows attackers to cause a denial of service.(CVE-2022-40433)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise…

Record: OESA-2023-1739
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4157 7.5

Red Hat Security Advisory: java-11-openjdk security update

Record: RHSA-2023:4157
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4158 7.5

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2023:4158
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4159 7.5

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2023:4159
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4162 7.5

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2023:4162
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4163 7.5

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2023:4163
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4164 7.5

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2023:4164
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4165 7.5

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2023:4165
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4166 3.7

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2023:4166
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2023:4167 3.7

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:4167
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2023:4168 3.7

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:4168
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2023:4169 7.5

Red Hat Security Advisory: java-17-openjdk security update

Record: RHSA-2023:4169
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4170 7.5

Red Hat Security Advisory: java-17-openjdk security update

Record: RHSA-2023:4170
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4171 7.5

Red Hat Security Advisory: java-17-openjdk security update

Record: RHSA-2023:4171
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4172 3.7

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:4172
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2023:4173 3.7

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:4173
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2023:4174 3.7

Red Hat Security Advisory: java-1.8.0-openjdk security update

Record: RHSA-2023:4174
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2023:4175 7.5

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2023:4175
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4176 3.7

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2023:4176
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2023:4177 7.5

Red Hat Security Advisory: java-17-openjdk security and bug fix update

Record: RHSA-2023:4177
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4178 3.7

Red Hat Security Advisory: java-1.8.0-openjdk security and bug fix update

Record: RHSA-2023:4178
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2023:4233 7.5

Red Hat Security Advisory: java-11-openjdk security and bug fix update

Record: RHSA-2023:4233
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2023:4876 3.7

Red Hat Security Advisory: java-1.8.0-ibm security update

Record: RHSA-2023:4876
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2023:4877 3.7

Red Hat Security Advisory: java-1.8.0-ibm security update

Record: RHSA-2023:4877
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVRLSA-2023:4176 3.7

Moderate: java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [rhel-8] (BZ#2219727)

Record: RLSA-2023:4176
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated: 2026-11-02

OSVRLSA-2023:4178 3.7

Moderate: java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [rhel-9] (BZ#2220662)

Record: RLSA-2023:4178
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-22049 3.7

Record: UBUNTU-CVE-2023-22049
CVSS 3.1: 3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Updated: 2026-11-02

OSVALSA-2023:4158 No score

Moderate: java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-9] (BZ#2223100)

Record: ALSA-2023:4158
Updated: 2026-11-02

OSVALSA-2023:4159 No score

Moderate: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221655)
Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-8] (BZ#2222368)

Record: ALSA-2023:4159
Updated: 2026-11-02

OSVALSA-2023:4175 No score

Moderate: java-11-openjdk security and bug fix update

The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.

Security Fix(es):

OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

A virtual machine crash was observed in JDK 11.0.19 when executing the GregorianCalender.computeTime() method (JDK-8307683). It was found that although the root cause of the crash is an old issue, a recent fix for a rare issue in the C2 compiler (JDK-8297951) made the crash much more likely. To mitigate this, the fix has been reverted in JDK 11.0.20 and will be reapplied once JDK-8307683 is resolved. (RHBZ#2222493)
Prepare for the next quarterly OpenJDK upstream release (2023-07, 11.0.20) [almalinux-8] (BZ#2223101)

Record: ALSA-2023:4175
Updated: 2026-11-02

OSVALSA-2023:4176 No score

Moderate: java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [almalinux-8] (BZ#2219727)

Record: ALSA-2023:4176
Updated: 2026-11-02

OSVALSA-2023:4177 No score

Moderate: java-17-openjdk security and bug fix update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.

Security Fix(es):

OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036)
OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041)
OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193)
OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006)
OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044)
OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Installing the same java-17-openjdk-headless package on two different systems resulted in distinct classes.jsa files getting generated. This was because the CDS archive was being generated by a post script action of the java-17-openjdk-headless package. This prevented the use of the dynamic dump feature, as the checksum in the archive would be different on each system. This is resolved in this release by using the .jsa files generated during the initial build. (RHBZ#2221653)
Prepare for the next quarterly OpenJDK upstream release (2023-07, 17.0.8) [almalinux-9] (BZ#2222852)

Record: ALSA-2023:4177
Updated: 2026-11-02

OSVALSA-2023:4178 No score

Moderate: java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049)
OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

Prepare for the next quarterly OpenJDK upstream release (2023-07, 8u382) [almalinux-9] (BZ#2220662)

Record: ALSA-2023:4178
Updated: 2026-11-02

OSVBIT-java-2023-22049 No score

Record: BIT-java-2023-22049
Updated: 2026-11-02

OSVBIT-java-min-2023-22049 No score

Record: BIT-java-min-2023-22049
Updated: 2026-11-02

OSVBIT-jre-2023-22049 No score

Record: BIT-jre-2023-22049
Updated: 2026-11-02

OSVCLSA-2023-1691081102 No score

java-1.8.0-openjdk: Fix of 2 CVEs

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u382-b05. That fixes following CVEs:
CVE-2023-22045: Array indexing integer overflow issue. (8304468)
CVE-2023-22049: Improper handling of slash characters in URI-to-path conversion (8305312)
Remove patch for pkcs11 cause issue was fixed in sources

Record: CLSA-2023-1691081102
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`openjdk11` Alpine:v3.16	before 11.0.20_p8-r0	11.0.20_p8-r0
`openjdk11` Alpine:v3.17	before 11.0.20_p8-r0	11.0.20_p8-r0
`openjdk11` Alpine:v3.18	before 11.0.20_p8-r0	11.0.20_p8-r0
`openjdk11` Alpine:v3.19	before 11.0.20_p8-r0	11.0.20_p8-r0
`openjdk11` Alpine:v3.20	before 11.0.20_p8-r0	11.0.20_p8-r0
`openjdk11` Alpine:v3.21	before 11.0.20_p8-r0	11.0.20_p8-r0
`openjdk11` Alpine:v3.22	before 11.0.20_p8-r0	11.0.20_p8-r0
`openjdk11` Alpine:v3.23	before 11.0.20_p8-r0	11.0.20_p8-r0
`openjdk11` Alpine:v3.24	before 11.0.20_p8-r0	11.0.20_p8-r0
`openjdk17` Alpine:v3.16	before 17.0.8_p7-r0	17.0.8_p7-r0

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`openjdk17` Alpine:v3.17	before 17.0.8_p7-r0	17.0.8_p7-r0
`openjdk17` Alpine:v3.18	before 17.0.8_p7-r0	17.0.8_p7-r0
`openjdk17` Alpine:v3.19	before 17.0.8_p7-r0	17.0.8_p7-r0
`openjdk17` Alpine:v3.20	before 17.0.8_p7-r0	17.0.8_p7-r0
`openjdk17` Alpine:v3.21	before 17.0.8_p7-r0	17.0.8_p7-r0
`openjdk17` Alpine:v3.22	before 17.0.8_p7-r0	17.0.8_p7-r0
`openjdk17` Alpine:v3.23	before 17.0.8_p7-r0	17.0.8_p7-r0
`openjdk17` Alpine:v3.24	before 17.0.8_p7-r0	17.0.8_p7-r0
`openjdk8` Alpine:v3.15	before 8.382.05-r0	8.382.05-r0
`openjdk8` Alpine:v3.16	before 8.382.05-r0	8.382.05-r0
`openjdk8` Alpine:v3.17	before 8.382.05-r0	8.382.05-r0
`openjdk8` Alpine:v3.18	before 8.382.05-r0	8.382.05-r0
`openjdk8` Alpine:v3.19	before 8.382.05-r0	8.382.05-r0
`openjdk8` Alpine:v3.20	before 8.382.05-r0	8.382.05-r0
`openjdk8` Alpine:v3.21	before 8.382.05-r0	8.382.05-r0
`openjdk8` Alpine:v3.22	before 8.382.05-r0	8.382.05-r0
`openjdk8` Alpine:v3.23	before 8.382.05-r0	8.382.05-r0
`openjdk8` Alpine:v3.24	before 8.382.05-r0	8.382.05-r0
`java-11-openjdk` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-demo` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-demo-fastdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-demo-slowdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-devel` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-devel-fastdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-devel-slowdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-fastdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-headless` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-headless-fastdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-headless-slowdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-javadoc` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-javadoc-zip` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-jmods` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-jmods-fastdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-jmods-slowdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-slowdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-src` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-src-fastdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-src-slowdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-static-libs` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-static-libs-fastdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-static-libs-slowdebug` AlmaLinux:9 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-17-openjdk` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-demo` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-demo-fastdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-demo-slowdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-devel` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-devel-fastdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-devel-slowdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-fastdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-headless` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-headless-fastdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-headless-slowdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-javadoc` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-javadoc-zip` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-jmods` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-jmods-fastdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-jmods-slowdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-slowdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-src` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-src-fastdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-src-slowdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-static-libs` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-static-libs-fastdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-17-openjdk-static-libs-slowdebug` AlmaLinux:8 From an advisory covering 7 CVEs	before 1:17.0.8.0.7-2.el8	1:17.0.8.0.7-2.el8
`java-11-openjdk` AlmaLinux:8 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el8	1:11.0.20.0.8-2.el8
`java-11-openjdk-demo` AlmaLinux:8 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el8	1:11.0.20.0.8-2.el8
`java-11-openjdk-demo-fastdebug` AlmaLinux:8 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el8	1:11.0.20.0.8-2.el8
`java-11-openjdk-demo-slowdebug` AlmaLinux:8 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el8	1:11.0.20.0.8-2.el8
`java-11-openjdk-devel` AlmaLinux:8 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el8	1:11.0.20.0.8-2.el8
`java-11-openjdk-devel-fastdebug` AlmaLinux:8 From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el8	1:11.0.20.0.8-2.el8
`java` Bitnami	before 1.8.0, 1.9.0 up to 8.0.381, 9.0.0 up to 11.0.20, 12.0.0 up to 17.0.8, 18.0.0 up to 20.0.2	1.8.08.0.38111.0.2017.0.820.0.2
`java-min` Bitnami	before 1.8.0, 1.9.0 up to 8.0.381, 9.0.0 up to 11.0.20, 12.0.0 up to 17.0.8, 18.0.0 up to 20.0.2	1.8.08.0.38111.0.2017.0.820.0.2
`jre` Bitnami	before 1.8.0, 1.9.0 up to 8.0.381, 9.0.0 up to 11.0.20, 12.0.0 up to 17.0.8, 18.0.0 up to 20.0.2	1.8.08.0.38111.0.2017.0.820.0.2
`java-1.8.0-openjdk` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc-zip` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src-fastdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src-slowdebug` TuxCare:CentOS:8.4 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-accessibility-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-demo-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-devel-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-headless-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-javadoc-zip` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src-fastdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk-src-slowdebug` TuxCare:CentOS:8.5 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el8.tuxcare.els1	1:1.8.0.382.b05-1.el8.tuxcare.els1
`java-1.8.0-openjdk` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-debug` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-demo` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-demo-debug` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-devel` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-devel-debug` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-headless` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-headless-debug` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-javadoc` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-javadoc-debug` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-src` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`java-1.8.0-openjdk-src-debug` TuxCare:OracleLinux:6 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-1.el6.tuxcare.els1	1:1.8.0.382.b05-1.el6.tuxcare.els1
`openjdk-17` Debian:12	before 17.0.8+7-1~deb12u1, plus listed versions 17.0.6+10-117.0.7+7-117.0.7+7-1~deb11u117.0.7+7-1~deb12u117.0.7+7-2 Show 5 moreShow less 17.0.8~6-117.0.8~6-217.0.8~6-317.0.8~6-417.0.8~6-5	17.0.8+7-1~deb12u1
`openjdk-11` Debian:10 From an advisory covering 12 CVEs	before 11.0.20+8-1~deb10u1, plus listed versions 11.0.10+8-111.0.10+9-111.0.11+3-111.0.11+3-211.0.11+3-3 Show 45 moreShow less 11.0.11+4-111.0.11+7-111.0.11+8-111.0.11+9-111.0.11+9-1~deb10u111.0.12+4-111.0.12+6-111.0.12+7-111.0.12+7-211.0.12+7-2~deb10u111.0.13+8-111.0.13+8-1~deb10u111.0.13+8-1~deb11u111.0.14+9-111.0.14+9-1~deb10u111.0.14+9-1~deb11u111.0.14.1+1-111.0.15+10-111.0.15+10-1~deb10u111.0.15+10-1~deb11u111.0.16+8-111.0.16+8-1~deb10u111.0.16+8-1~deb11u111.0.17+8-111.0.17+8-211.0.18+10-111.0.18+10-1~deb10u111.0.18+10-1~deb11u111.0.19+7+really11.0.11+9-1+b211.0.19+7-111.0.20~7-111.0.3+7-511.0.4+1-111.0.4+10-111.0.4+11-111.0.4+11-1~bpo9+111.0.4+11-1~deb10u111.0.4+2-111.0.4+4+really11.0.3+7-111.0.4+4+really11.0.3+7-211.0.4+4-111.0.4+6-111.0.4+8-111.0.4+9-111.0.5+10-1	11.0.20+8-1~deb10u1
`openjdk-17` Debian:12 From an advisory covering 6 CVEs	before 17.0.8+7-1~deb12u1, plus listed versions 17.0.6+10-117.0.7+7-117.0.7+7-1~deb11u117.0.7+7-1~deb12u117.0.7+7-2 Show 5 moreShow less 17.0.8~6-117.0.8~6-217.0.8~6-317.0.8~6-417.0.8~6-5	17.0.8+7-1~deb12u1
`openjdk-11` Debian:11 From an advisory covering 12 CVEs	before 11.0.20+8-1~deb11u1, plus listed versions 11.0.12+7-211.0.13+8-111.0.13+8-1~deb10u111.0.13+8-1~deb11u111.0.14+9-1 Show 18 moreShow less 11.0.14+9-1~deb10u111.0.14+9-1~deb11u111.0.14.1+1-111.0.15+10-111.0.15+10-1~deb10u111.0.15+10-1~deb11u111.0.16+8-111.0.16+8-1~deb10u111.0.16+8-1~deb11u111.0.17+8-111.0.17+8-211.0.18+10-111.0.18+10-1~deb10u111.0.18+10-1~deb11u111.0.19+7+really11.0.11+9-1+b211.0.19+7-111.0.20+8-1~deb10u111.0.20~7-1	11.0.20+8-1~deb11u1
`java-1.8.0-openjdk` Mageia:8 From an advisory covering 14 CVEs	before 1.8.0.382.b05-1.mga8	1.8.0.382.b05-1.mga8
`java-11-openjdk` Mageia:8 From an advisory covering 14 CVEs	before 11.0.20.0.8-1.mga8	11.0.20.0.8-1.mga8
`openjfx` Mageia:8 From an advisory covering 14 CVEs	before 11.0.9.2-4.mga8	11.0.9.2-4.mga8
`java-1.8.0-openjdk` Mageia:9 From an advisory covering 14 CVEs	before 1.8.0.382.b05-1.mga9	1.8.0.382.b05-1.mga9
`java-11-openjdk` Mageia:9 From an advisory covering 14 CVEs	before 11.0.20.0.8-1.mga9	11.0.20.0.8-1.mga9
`java-17-openjdk` Mageia:9 From an advisory covering 14 CVEs	before 17.0.8.0.7-1.mga9	17.0.8.0.7-1.mga9
`java-latest-openjdk` Mageia:9 From an advisory covering 14 CVEs	before 20.0.2.0.9-1.rolling.2.mga9	20.0.2.0.9-1.rolling.2.mga9
`openjdk-11` openEuler:22.03-LTS-SP1 From an advisory covering 14 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203sp1	java-11-openjdk-11.0.20.8-2.oe2203sp1
`openjdk-11` openEuler:22.03-LTS-SP2 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203sp2	java-11-openjdk-11.0.20.8-2.oe2203sp2
`openjdk-1.8.0` openEuler:20.03-LTS-SP1 From an advisory covering 13 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-7.oe1	java-1.8.0-openjdk-1.8.0.382.b05-7.oe1
`openjdk-1.8.0` openEuler:20.03-LTS-SP3 From an advisory covering 13 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-7.oe1	java-1.8.0-openjdk-1.8.0.382.b05-7.oe1
`openjdk-1.8.0` openEuler:22.03-LTS From an advisory covering 13 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203	java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203
`openjdk-1.8.0` openEuler:22.03-LTS-SP1 From an advisory covering 12 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp1	java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp1
`openjdk-1.8.0` openEuler:22.03-LTS-SP2 From an advisory covering 12 CVEs	before java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp2	java-1.8.0-openjdk-1.8.0.382.b05-8.oe2203sp2
`openjdk-11` openEuler:20.03-LTS-SP1 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe1	java-11-openjdk-11.0.20.8-2.oe1
`openjdk-11` openEuler:20.03-LTS-SP3 From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe1	java-11-openjdk-11.0.20.8-2.oe1
`openjdk-11` openEuler:22.03-LTS From an advisory covering 15 CVEs	before java-11-openjdk-11.0.20.8-2.oe2203	java-11-openjdk-11.0.20.8-2.oe2203
`java-11-openjdk` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-debugsource` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-demo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-devel` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-devel-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-headless` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-headless-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-javadoc` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-javadoc-zip` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-jmods` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-src` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-static-libs` Red Hat:rhel_eus:9.0::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-debugsource` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-demo-fastdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-demo-slowdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-devel-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-devel-fastdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-devel-fastdebug-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-devel-slowdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-devel-slowdebug-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-fastdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-fastdebug-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-headless-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-headless-fastdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-headless-fastdebug-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-headless-slowdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-headless-slowdebug-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-jmods-fastdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-jmods-slowdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-slowdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-slowdebug-debuginfo` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-src-fastdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-src-slowdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-static-libs-fastdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk-static-libs-slowdebug` Red Hat:rhel_eus:9.0::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-1.el9_0	1:11.0.20.0.8-1.el9_0
`java-11-openjdk` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-demo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-devel-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-headless` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-headless-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-javadoc` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-javadoc-zip` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-jmods` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-src` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-static-libs` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-11-openjdk-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 1:11.0.20.0.8-2.el9	1:11.0.20.0.8-2.el9
`java-1.8.0-openjdk` Rocky Linux:8 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-2.el8	1:1.8.0.382.b05-2.el8
`java-1.8.0-openjdk` Rocky Linux:9 From an advisory covering 2 CVEs	before 1:1.8.0.382.b05-2.el9	1:1.8.0.382.b05-2.el9
`java-11-openjdk` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 7 CVEs	before 11.0.20.0-3.61.1	11.0.20.0-3.61.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 7 CVEs	before 11.0.20.0-3.61.1	11.0.20.0-3.61.1
`java-17-openjdk` SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 7 CVEs	before 17.0.8.0-150400.3.27.1	17.0.8.0-150400.3.27.1
`java-17-openjdk` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 7 CVEs	before 17.0.8.0-150400.3.27.1	17.0.8.0-150400.3.27.1
`java-17-openjdk` openSUSE:Leap 15.4 From an advisory covering 7 CVEs	before 17.0.8.0-150400.3.27.1	17.0.8.0-150400.3.27.1
`java-17-openjdk` openSUSE:Leap 15.5 From an advisory covering 7 CVEs	before 17.0.8.0-150400.3.27.1	17.0.8.0-150400.3.27.1
`java-11-openjdk` SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise Module for Package Hub 15 SP4 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Manager Proxy 4.2 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Manager Server 4.2 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` SUSE:Enterprise Storage 7.1 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` openSUSE:Leap 15.4 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-11-openjdk` openSUSE:Leap 15.5 From an advisory covering 7 CVEs	before 11.0.20.0-150000.3.99.1	11.0.20.0-150000.3.99.1
`java-1_8_0-openj9` SUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 2 CVEs	before 1.8.0.382-150200.3.36.1	1.8.0.382-150200.3.36.1
`java-1_8_0-openj9` openSUSE:Leap 15.4 From an advisory covering 2 CVEs	before 1.8.0.382-150200.3.36.1	1.8.0.382-150200.3.36.1
`java-1_8_0-openj9` openSUSE:Leap 15.5 From an advisory covering 2 CVEs	before 1.8.0.382-150200.3.36.1	1.8.0.382-150200.3.36.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-30.114.1	1.8.0_sr8.10-30.114.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-30.114.1	1.8.0_sr8.10-30.114.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-30.114.1	1.8.0_sr8.10-30.114.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Module for Legacy 15 SP4 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Enterprise Storage 7 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` SUSE:Enterprise Storage 7.1 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` openSUSE:Leap 15.4 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-ibm` openSUSE:Leap 15.5 From an advisory covering 8 CVEs	before 1.8.0_sr8.10-150000.3.80.1	1.8.0_sr8.10-150000.3.80.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Module for Legacy 15 SP4 From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Enterprise Storage 7.1 From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` openSUSE:Leap 15.4 From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` openSUSE:Leap 15.5 From an advisory covering 2 CVEs	before 1.8.0.382-150000.3.82.1	1.8.0.382-150000.3.82.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 2 CVEs	before 1.8.0.382-27.90.1	1.8.0.382-27.90.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs	before 1.8.0.382-27.90.1	1.8.0.382-27.90.1
`java-1_8_0-openjdk` SUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs	before 1.8.0.382-27.90.1	1.8.0.382-27.90.1
`openjdk-8` Ubuntu:Pro:16.04:LTS	before 8u382-ga-1~16.04.1, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 36 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.04	8u382-ga-1~16.04.1
`openjdk-9` Ubuntu:16.04:LTS	All versions, plus listed versions 9~b88-19~b101-2ubuntu29~b102-19~b113-0ubuntu19~b114-0ubuntu1	None known
`openjdk-lts` Ubuntu:Pro:18.04:LTS	before 11.0.20+8-1ubuntu1~18.04, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 24 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.111.0.19+7~us1-0ubuntu1~18.04.1	11.0.20+8-1ubuntu1~18.04
`openjdk-17` Ubuntu:Pro:18.04:LTS	before 17.0.8+7-1~18.04, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.0417.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.04	17.0.8+7-1~18.04
`openjdk-8` Ubuntu:Pro:18.04:LTS	before 8u382-ga-1~18.04.1, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 18 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.04	8u382-ga-1~18.04.1
`openjdk-17` Ubuntu:20.04:LTS	before 17.0.8+7-1~20.04.2, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.0417.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.04	17.0.8+7-1~20.04.2
`openjdk-8` Ubuntu:20.04:LTS	before 8u382-ga-1~20.04.1, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 11 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.04	8u382-ga-1~20.04.1
`openjdk-lts` Ubuntu:20.04:LTS	before 11.0.20+8-1ubuntu1~20.04, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 15 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.111.0.19+7~us1-0ubuntu1~20.04.1	11.0.20+8-1ubuntu1~20.04
`openjdk-13` Ubuntu:20.04:LTS	All versions, plus listed versions 13+33-113.0.1+9-213.0.2+8-113.0.2+8-213.0.3+3-1ubuntu213.0.4+8-1~20.0413.0.7+5-0ubuntu1~20.04	None known
`openjdk-16` Ubuntu:20.04:LTS	All versions, plus listed versions 16.0.1+9-1~20.04	None known
`openjdk-17` Ubuntu:22.04:LTS	before 17.0.8+7-1~22.04, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.0417.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.2	17.0.8+7-1~22.04
`openjdk-18` Ubuntu:22.04:LTS	All versions, plus listed versions 18~15ea-418~20ea-118~32ea-118~36ea-118.0.2+9-2~22.04	None known
`openjdk-8` Ubuntu:22.04:LTS	before 8u382-ga-1~22.04.1, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.048u372-ga~us1-0ubuntu1~22.04	8u382-ga-1~22.04.1
`openjdk-lts` Ubuntu:22.04:LTS	before 11.0.20+8-1ubuntu1~22.04, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.1 Show 4 moreShow less 11.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.0411.0.19+7~us1-0ubuntu1~22.04.1	11.0.20+8-1ubuntu1~22.04
`openjdk-8` Ubuntu:Pro:16.04:LTS From an advisory covering 7 CVEs	before 8u382-ga-1~16.04.1, plus listed versions 8u66-b01-58u72-b05-1ubuntu18u72-b05-58u72-b05-68u72-b15-1 Show 36 moreShow less 8u72-b15-2ubuntu18u72-b15-2ubuntu38u72-b15-3ubuntu18u77-b03-1ubuntu28u77-b03-3ubuntu18u77-b03-3ubuntu28u77-b03-3ubuntu38u91-b14-0ubuntu4~16.04.18u91-b14-3ubuntu1~16.04.18u111-b14-2ubuntu0.16.04.28u121-b13-0ubuntu1.16.04.28u131-b11-0ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.28u131-b11-2ubuntu1.16.04.38u151-b12-0ubuntu0.16.04.28u162-b12-0ubuntu0.16.04.28u171-b11-0ubuntu0.16.04.18u181-b13-0ubuntu0.16.04.18u181-b13-1ubuntu0.16.04.18u191-b12-0ubuntu0.16.04.18u191-b12-2ubuntu0.16.04.18u212-b03-0ubuntu1.16.04.18u222-b10-1ubuntu1~16.04.18u232-b09-0ubuntu1~16.04.18u242-b08-0ubuntu3~16.048u252-b09-1~16.048u265-b01-0ubuntu2~16.048u272-b10-0ubuntu1~16.048u275-b01-0ubuntu1~16.048u282-b08-0ubuntu1~16.048u292-b10-0ubuntu1~16.04.18u312-b07-0ubuntu1~16.048u342-b07-0ubuntu1~16.048u352-ga-1~16.048u362-ga-0ubuntu1~16.04.18u372-ga~us1-0ubuntu1~16.04	8u382-ga-1~16.04.1
`openjdk-lts` Ubuntu:Pro:18.04:LTS From an advisory covering 7 CVEs	before 11.0.20+8-1ubuntu1~18.04, plus listed versions 9.0.4+12-2ubuntu49.0.4+12-4ubuntu110~46-4ubuntu110~46-5ubuntu110.0.1+10-1ubuntu2 Show 24 moreShow less 10.0.1+10-3ubuntu110.0.2+13-1ubuntu0.18.04.110.0.2+13-1ubuntu0.18.04.210.0.2+13-1ubuntu0.18.04.310.0.2+13-1ubuntu0.18.04.411.0.2+9-3ubuntu1~18.04.311.0.3+7-1ubuntu2~18.04.111.0.4+11-1ubuntu2~18.04.311.0.5+10-0ubuntu1.1~18.0411.0.6+10-1ubuntu1~18.04.111.0.7+10-2ubuntu2~18.0411.0.8+10-0ubuntu1~18.04.111.0.9+11-0ubuntu1~18.04.111.0.9.1+1-0ubuntu1~18.0411.0.10+9-0ubuntu1~18.0411.0.11+9-0ubuntu2~18.0411.0.13+8-0ubuntu1~18.0411.0.14+9-0ubuntu2~18.0411.0.14.1+1-0ubuntu1~18.0411.0.15+10-0ubuntu0.18.04.111.0.16+8-0ubuntu1~18.0411.0.17+8-1ubuntu2~18.0411.0.18+10-0ubuntu1~18.04.111.0.19+7~us1-0ubuntu1~18.04.1	11.0.20+8-1ubuntu1~18.04
`openjdk-17` Ubuntu:Pro:18.04:LTS From an advisory covering 7 CVEs	before 17.0.8+7-1~18.04, plus listed versions 17+35-1~18.0417.0.1+12-1~18.0417.0.2+8-1~18.0417.0.3+7-0ubuntu0.18.04.117.0.4+8-1~18.0417.0.5+8-2ubuntu1~18.0417.0.6+10-0ubuntu1~18.04.117.0.7+7~us1-0ubuntu1~18.04	17.0.8+7-1~18.04
`openjdk-8` Ubuntu:Pro:18.04:LTS From an advisory covering 7 CVEs	before 8u382-ga-1~18.04.1, plus listed versions 8u144-b01-28u151-b12-18u162-b12-18u171-b11-0ubuntu0.18.04.18u181-b13-0ubuntu0.18.04.1 Show 18 moreShow less 8u181-b13-1ubuntu0.18.04.18u191-b12-0ubuntu0.18.04.18u191-b12-2ubuntu0.18.04.18u212-b03-0ubuntu1.18.04.18u222-b10-1ubuntu1~18.04.18u232-b09-0ubuntu1~18.04.18u242-b08-0ubuntu3~18.048u252-b09-1~18.048u265-b01-0ubuntu2~18.048u272-b10-0ubuntu1~18.048u275-b01-0ubuntu1~18.048u282-b08-0ubuntu1~18.048u292-b10-0ubuntu1~18.048u312-b07-0ubuntu1~18.048u342-b07-0ubuntu1~18.048u352-ga-1~18.048u362-ga-0ubuntu1~18.04.18u372-ga~us1-0ubuntu1~18.04	8u382-ga-1~18.04.1
`openjdk-17` Ubuntu:20.04:LTS From an advisory covering 7 CVEs	before 17.0.8+7-1~20.04.2, plus listed versions 17+35-1~20.0417.0.1+12-1~20.0417.0.2+8-1~20.0417.0.3+7-0ubuntu0.20.04.117.0.4+8-1~20.0417.0.5+8-2ubuntu1~20.0417.0.6+10-0ubuntu1~20.04.117.0.7+7~us1-0ubuntu1~20.04	17.0.8+7-1~20.04.2
`openjdk-8` Ubuntu:20.04:LTS From an advisory covering 7 CVEs	before 8u382-ga-1~20.04.1, plus listed versions 8u232-b09-0ubuntu18u232-b09-18u242-b04-18u242-b08-0ubuntu38u252-b07-1 Show 11 moreShow less 8u252-b09-1ubuntu18u265-b01-0ubuntu2~20.048u272-b10-0ubuntu1~20.048u275-b01-0ubuntu1~20.048u282-b08-0ubuntu1~20.048u292-b10-0ubuntu1~20.048u312-b07-0ubuntu1~20.048u342-b07-0ubuntu1~20.048u352-ga-1~20.048u362-ga-0ubuntu1~20.04.18u372-ga~us1-0ubuntu1~20.04	8u382-ga-1~20.04.1
`openjdk-lts` Ubuntu:20.04:LTS From an advisory covering 7 CVEs	before 11.0.20+8-1ubuntu1~20.04, plus listed versions 11.0.5+10-0ubuntu111.0.5+10-2ubuntu111.0.6+10-1ubuntu111.0.6+10-2ubuntu211.0.7+9-1ubuntu1 Show 15 moreShow less 11.0.7+10-2ubuntu111.0.7+10-3ubuntu111.0.8+10-0ubuntu1~20.0411.0.9+11-0ubuntu1~20.0411.0.9.1+1-0ubuntu1~20.0411.0.10+9-0ubuntu1~20.0411.0.11+9-0ubuntu2~20.0411.0.13+8-0ubuntu1~20.0411.0.14+9-0ubuntu2~20.0411.0.14.1+1-0ubuntu1~20.0411.0.15+10-0ubuntu0.20.04.111.0.16+8-0ubuntu1~20.0411.0.17+8-1ubuntu2~20.0411.0.18+10-0ubuntu1~20.04.111.0.19+7~us1-0ubuntu1~20.04.1	11.0.20+8-1ubuntu1~20.04
`openjdk-17` Ubuntu:22.04:LTS From an advisory covering 7 CVEs	before 17.0.8+7-1~22.04, plus listed versions 17+35-117.0.1+12-117.0.2+8-117.0.3+7-0ubuntu0.22.04.117.0.4+8-1~22.0417.0.5+8-2ubuntu1~22.0417.0.6+10-0ubuntu1~22.0417.0.7+7~us1-0ubuntu1~22.04.2	17.0.8+7-1~22.04
`openjdk-8` Ubuntu:22.04:LTS From an advisory covering 7 CVEs	before 8u382-ga-1~22.04.1, plus listed versions 8u302-b08-0ubuntu28u312-b07-0ubuntu18u342-b07-0ubuntu1~22.048u352-ga-1~22.048u362-ga-0ubuntu1~22.048u372-ga~us1-0ubuntu1~22.04	8u382-ga-1~22.04.1
`openjdk-lts` Ubuntu:22.04:LTS From an advisory covering 7 CVEs	before 11.0.20+8-1ubuntu1~22.04, plus listed versions 11.0.12+7-0ubuntu311.0.13+8-0ubuntu111.0.14+9-0ubuntu211.0.14.1+1-0ubuntu111.0.15+10-0ubuntu0.22.04.1 Show 4 moreShow less 11.0.16+8-0ubuntu1~22.0411.0.17+8-1ubuntu2~22.0411.0.18+10-0ubuntu1~22.0411.0.19+7~us1-0ubuntu1~22.04.1	11.0.20+8-1ubuntu1~22.04
`java-11-openjdk` openSUSE:Tumbleweed From an advisory covering 7 CVEs	before 11.0.20.0-1.1	11.0.20.0-1.1
`java-17-openjdk` openSUSE:Tumbleweed From an advisory covering 7 CVEs	before 17.0.8.0-1.1	17.0.8.0-1.1
`java-1_8_0-openjdk` openSUSE:Tumbleweed From an advisory covering 2 CVEs	before 1.8.0.382-1.1	1.8.0.382-1.1
`java-11-openj9` openSUSE:Tumbleweed From an advisory covering 8 CVEs	before 11.0.20.0-1.1	11.0.20.0-1.1
`java-11-openj9` openSUSE:Leap 15.6 From an advisory covering 58 CVEs	before 11.0.26.0-bp156.4.3.1	11.0.26.0-bp156.4.3.1
`java-17-openj9` openSUSE:Leap 15.6 From an advisory covering 47 CVEs	before 17.0.14.0-bp156.3.3.1	17.0.14.0-bp156.3.3.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected, aliases, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-22049 is a low vulnerability (CVSS 3.7) in Oracle Graalvm, published July 18, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.46%, the 73rd percentile. Fixed in openjdk11 11.0.20_p8-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 880 package rows, 24 versions, 138 references and the rest of 10 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 25 source records.