{"id":"ALBA-2021:5232","aliases":[],"status":"published","title":"java-11-openjdk bug fix and enhancement update","description":"The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.\n\nBug Fix(es) and Enhancement(s):\n\n* While in FIPS mode, the NSS Software Token does not allow the import of private or secret plain keys. This caused the OpenJDK keytool application to fail when used with OpenJDK in FIPS mode. With this update, OpenJDK will now import such keys into the NSS database. This behaviour may be disabled using -Dcom.AlmaLinux.fips.plainKeySupport=false. (RHBZ#2014212)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-12-21T09:09:22Z","modified":"2021-12-22T14:11:08Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo-fastdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo-slowdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel-fastdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel-slowdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-fastdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless-fastdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless-slowdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-javadoc","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-javadoc-zip","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods-fastdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods-slowdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-slowdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src-fastdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src-slowdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs-fastdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs-slowdebug","fixed_in":["1:11.0.13.0.8-4.el8_5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.13.0.8-4.el8_5"}]}]}],"sources":{"osv":[{"id":"ALBA-2021:5232","title":"java-11-openjdk bug fix and enhancement update","description":"The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.\n\nBug Fix(es) and Enhancement(s):\n\n* While in FIPS mode, the NSS Software Token does not allow the import of private or secret plain keys. This caused the OpenJDK keytool application to fail when used with OpenJDK in FIPS mode. With this update, OpenJDK will now import such keys into the NSS database. This behaviour may be disabled using -Dcom.AlmaLinux.fips.plainKeySupport=false. (RHBZ#2014212)","status":"published","published":"2021-12-21T09:09:22Z","modified":"2021-12-22T14:11:08Z","updated_at":"2026-11-02T15:27:45.973197Z"}]}}