{"id":"ALBA-2022:0887","aliases":[],"status":"published","title":"java-11-openjdk bug fix and enhancement update","description":"The java-11-openjdk packages provide the OpenJDK 11 Java Runtime\nEnvironment and the OpenJDK 11 Java Software Development Kit.\n\nBug Fix(es):\n\n* The previous OpenJDK 11 release, 11.0.14, was found to contain a regression introduced by improvements to the HTTP client.  It caused both the :authority' and 'Host' header fields to be sent in HTTP/2 requests, which is rejected by some HTTP servers, such as Google's. With this update, the previous behaviour of only setting the ':authority' header is now used. (RH#2053174)\n* Recent changes to the Lightweight Directory Access Protocol (LDAP) implementation in OpenJDK changed the behaviour when an authentication failure occurred. Instead of aborting immediately, all available LDAP servers would be tried with the same credentials. With this update, the previous behaviour of failure after the first authentication denial is restored. (RH#2055344)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-03-15T09:10:19Z","modified":"2022-03-16T22:22:38Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo-fastdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo-slowdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel-fastdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel-slowdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-fastdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless-fastdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless-slowdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-javadoc","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-javadoc-zip","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods-fastdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods-slowdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-slowdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src-fastdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src-slowdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs-fastdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs-slowdebug","fixed_in":["1:11.0.14.1.1-2.el8_5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.14.1.1-2.el8_5"}]}]}],"sources":{"osv":[{"id":"ALBA-2022:0887","title":"java-11-openjdk bug fix and enhancement update","description":"The java-11-openjdk packages provide the OpenJDK 11 Java Runtime\nEnvironment and the OpenJDK 11 Java Software Development Kit.\n\nBug Fix(es):\n\n* The previous OpenJDK 11 release, 11.0.14, was found to contain a regression introduced by improvements to the HTTP client.  It caused both the :authority' and 'Host' header fields to be sent in HTTP/2 requests, which is rejected by some HTTP servers, such as Google's. With this update, the previous behaviour of only setting the ':authority' header is now used. (RH#2053174)\n* Recent changes to the Lightweight Directory Access Protocol (LDAP) implementation in OpenJDK changed the behaviour when an authentication failure occurred. Instead of aborting immediately, all available LDAP servers would be tried with the same credentials. With this update, the previous behaviour of failure after the first authentication denial is restored. (RH#2055344)","status":"published","published":"2022-03-15T09:10:19Z","modified":"2022-03-16T22:22:38Z","updated_at":"2026-11-02T15:27:45.973197Z"}]}}