{"id":"CVE-2024-21012","aliases":["ALPINE-CVE-2024-21012","ALSA-2024:1822","ALSA-2024:1825","ALSA-2024:1828","BIT-java-2024-21012","BIT-java-min-2024-21012","BIT-jre-2024-21012","CLSA-2024-1726773559","CLSA-2024-1734708244","CLSA-2025-1753799434","DEBIAN-CVE-2024-21012","DLA-3793-1","DSA-5671-1","DSA-5672-1","EUVD-2024-18726","GHSA-ccmh-gwpx-35xj","MGASA-2024-0179","OESA-2024-1684","OESA-2024-1685","OESA-2024-1686","OESA-2024-1687","OESA-2024-1704","OESA-2024-2485","OESA-2024-2486","OESA-2024-2487","OESA-2024-2488","OESA-2024-2489","RHSA-2024:1821","RHSA-2024:1822","RHSA-2024:1825","RHSA-2024:1828","RLSA-2024:1822","RLSA-2024:1825","RLSA-2024:1828","SUSE-SU-2024:1452-1","SUSE-SU-2024:1498-1","SUSE-SU-2024:1498-2","SUSE-SU-2024:1499-1","SUSE-SU-2024:1499-2","SUSE-SU-2024:1845-1","SUSE-SU-2024:1859-1","UBUNTU-CVE-2024-21012","USN-6811-1","USN-6812-1","USN-6813-1","openSUSE-SU-2024:13871-1","openSUSE-SU-2024:13872-1","openSUSE-SU-2024:13873-1","openSUSE-SU-2024:13875-1","openSUSE-SU-2024:13995-1","openSUSE-SU-2024:13996-1","openSUSE-SU-2024:13998-1","openSUSE-SU-2025:0066-1","openSUSE-SU-2025:0067-1"],"status":"published","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0091,"percentile":0.60446,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-276"],"published":"2024-04-16T21:26:02Z","modified":"2026-11-03T06:32:59Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"openjdk11","fixed_in":["11.0.23_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk11","fixed_in":["11.0.23_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk11","fixed_in":["11.0.23_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk11","fixed_in":["11.0.23_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk11","fixed_in":["11.0.23_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk11","fixed_in":["11.0.23_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk11","fixed_in":["11.0.23_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk11","fixed_in":["11.0.23_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk17","fixed_in":["17.0.11_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk17","fixed_in":["17.0.11_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk17","fixed_in":["17.0.11_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk17","fixed_in":["17.0.11_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk17","fixed_in":["17.0.11_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk17","fixed_in":["17.0.11_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk17","fixed_in":["17.0.11_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk17","fixed_in":["17.0.11_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk21","fixed_in":["21.0.3_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk21","fixed_in":["21.0.3_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk21","fixed_in":["21.0.3_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk21","fixed_in":["21.0.3_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk21","fixed_in":["21.0.3_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk21","fixed_in":["21.0.3_p9-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java","fixed_in":["11.0.23","17.0.11","21.0.3","22.0.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["11.0.23","17.0.11","21.0.3","22.0.1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["11.0.23","17.0.11","21.0.3","22.0.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openjdk-17","fixed_in":["17.0.11+9-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openjdk-21","fixed_in":["21.0.3+9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openjdk-21","fixed_in":["21.0.3+9-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","fixed_in":["11.0.23+9-1ubuntu1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","fixed_in":["17.0.11+9-1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-17","fixed_in":["17.0.11+9-1~20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-21","fixed_in":["21.0.3+9-1ubuntu1~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","fixed_in":["11.0.23+9-1ubuntu1~20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","fixed_in":["17.0.11+9-1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","fixed_in":["21.0.3+9-1ubuntu1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","fixed_in":["11.0.23+9-1ubuntu1~22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3_p9-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.23"},{"introduced":"12.0.0"},{"fixed":"17.0.11"},{"introduced":"18.0.0"},{"fixed":"21.0.3"},{"introduced":"22.0.0"},{"fixed":"22.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.23"},{"introduced":"12.0.0"},{"fixed":"17.0.11"},{"introduced":"18.0.0"},{"fixed":"21.0.3"},{"introduced":"22.0.0"},{"fixed":"22.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"9.0.0"},{"fixed":"11.0.23"},{"introduced":"12.0.0"},{"fixed":"17.0.11"},{"introduced":"18.0.0"},{"fixed":"21.0.3"},{"introduced":"22.0.0"},{"fixed":"22.0.1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.22+7-0ubuntu1~18.04.1+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.22+7-0ubuntu1~18.04.1+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.22+7-0ubuntu1~18.04.1+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.22+7-0ubuntu1~18.04.1+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.22+7-0ubuntu1~18.04.1+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.22+7-0ubuntu1~18.04.1+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre-zero","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.22+7-0ubuntu1~18.04.1+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.22+7-0ubuntu1~18.04.1+tuxcare.els2"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.25+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.25+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.25+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.25+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.25+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.25+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-jre-zero","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.25+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"openjdk-11-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.25+9-0ubuntu1~18.04.1+tuxcare.els1"}]}],"bundled":15},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"java-1.8.0-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.8.0.452.b09-3.tuxcare.els1.el9"}]}],"bundled":19},{"source":"osv","ecosystem":"Debian:12","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11+9-1~deb12u1"}]}],"versions":["17.0.10+7-1","17.0.10+7-1~deb11u1","17.0.10+7-1~deb12u1","17.0.10+7-2","17.0.10+7-3","17.0.10~6ea-1","17.0.11+9-1~deb11u1","17.0.11~6ea-1","17.0.11~7ea-1","17.0.6+10-1","17.0.7+7-1","17.0.7+7-1~deb11u1","17.0.7+7-1~deb12u1","17.0.7+7-2","17.0.8+7-1","17.0.8+7-1~deb12u1","17.0.8~6-1","17.0.8~6-2","17.0.8~6-3","17.0.8~6-4","17.0.8~6-5","17.0.9+9-1","17.0.9+9-1~deb11u1","17.0.9+9-1~deb12u1","17.0.9+9-2","17.0.9~4ea-1","17.0.9~6ea-1"]},{"source":"osv","ecosystem":"Debian:13","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3+9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3+9-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23+9-1~deb10u1"}]}],"versions":["11.0.10+8-1","11.0.10+9-1","11.0.11+3-1","11.0.11+3-2","11.0.11+3-3","11.0.11+4-1","11.0.11+7-1","11.0.11+8-1","11.0.11+9-1","11.0.11+9-1~deb10u1","11.0.12+4-1","11.0.12+6-1","11.0.12+7-1","11.0.12+7-2","11.0.12+7-2~deb10u1","11.0.13+8-1","11.0.13+8-1~deb10u1","11.0.13+8-1~deb11u1","11.0.14+9-1","11.0.14+9-1~deb10u1","11.0.14+9-1~deb11u1","11.0.14.1+1-1","11.0.15+10-1","11.0.15+10-1~deb10u1","11.0.15+10-1~deb11u1","11.0.16+8-1","11.0.16+8-1~deb10u1","11.0.16+8-1~deb11u1","11.0.17+8-1","11.0.17+8-2","11.0.18+10-1","11.0.18+10-1~deb10u1","11.0.18+10-1~deb11u1","11.0.19+7+really11.0.11+9-1+b2","11.0.19+7-1","11.0.20+8-1","11.0.20+8-1~deb10u1","11.0.20+8-1~deb11u1","11.0.20~7-1","11.0.21+9-1","11.0.21+9-1~deb10u1","11.0.21+9-1~deb11u1","11.0.21~4ea-1","11.0.22+7-1","11.0.22+7-1~deb10u1","11.0.22+7-1~deb11u1","11.0.22+7-2","11.0.22+7-3","11.0.22~6ea-1","11.0.23~7ea-1","11.0.3+7-5","11.0.4+1-1","11.0.4+10-1","11.0.4+11-1","11.0.4+11-1~bpo9+1","11.0.4+11-1~deb10u1","11.0.4+2-1","11.0.4+4+really11.0.3+7-1","11.0.4+4+really11.0.3+7-2","11.0.4+4-1","11.0.4+6-1","11.0.4+8-1","11.0.4+9-1","11.0.5+10-1","11.0.5+10-1~bpo9+1","11.0.5+10-1~deb10u1","11.0.5+10-2","11.0.5+6-1","11.0.5+6-2","11.0.5+9-1","11.0.6+10-1","11.0.6+10-1~bpo9+1","11.0.6+10-1~deb10u1","11.0.6+10-2","11.0.6+7-1","11.0.7+10-1","11.0.7+10-2","11.0.7+10-3","11.0.7+10-3~deb10u1","11.0.7+9-1","11.0.8+10-1","11.0.8+10-1.1","11.0.8+10-1~deb10u1","11.0.9+11-1","11.0.9+11-1~deb10u1","11.0.9.1+1-1","11.0.9.1+1-1~deb10u1","11.0.9.1+1-1~deb10u2"],"bundled":5},{"source":"osv","ecosystem":"Debian:11","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23+9-1~deb11u1"}]}],"versions":["11.0.12+7-2","11.0.13+8-1","11.0.13+8-1~deb10u1","11.0.13+8-1~deb11u1","11.0.14+9-1","11.0.14+9-1~deb10u1","11.0.14+9-1~deb11u1","11.0.14.1+1-1","11.0.15+10-1","11.0.15+10-1~deb10u1","11.0.15+10-1~deb11u1","11.0.16+8-1","11.0.16+8-1~deb10u1","11.0.16+8-1~deb11u1","11.0.17+8-1","11.0.17+8-2","11.0.18+10-1","11.0.18+10-1~deb10u1","11.0.18+10-1~deb11u1","11.0.19+7+really11.0.11+9-1+b2","11.0.19+7-1","11.0.20+8-1","11.0.20+8-1~deb10u1","11.0.20+8-1~deb11u1","11.0.20~7-1","11.0.21+9-1","11.0.21+9-1~deb10u1","11.0.21+9-1~deb11u1","11.0.21~4ea-1","11.0.22+7-1","11.0.22+7-1~deb10u1","11.0.22+7-1~deb11u1","11.0.22+7-2","11.0.22+7-3","11.0.22~6ea-1","11.0.23+9-1~deb10u1","11.0.23~7ea-1"],"bundled":5},{"source":"osv","ecosystem":"Debian:11","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11+9-1~deb11u1"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.1+12-1+deb11u1","17.0.1+12-1+deb11u2","17.0.10+7-1","17.0.10+7-1~deb11u1","17.0.10+7-1~deb12u1","17.0.10+7-2","17.0.10+7-3","17.0.10~6ea-1","17.0.11~6ea-1","17.0.11~7ea-1","17.0.2+8-1","17.0.2+8-1~deb11u1","17.0.3+7-1","17.0.3+7-1~deb11u1","17.0.4+8-1","17.0.4+8-1~deb11u1","17.0.5+8-1","17.0.5+8-2","17.0.6+10-1","17.0.6+10-1~deb11u1","17.0.7+7-1","17.0.7+7-1~deb11u1","17.0.7+7-1~deb12u1","17.0.7+7-2","17.0.8+7-1","17.0.8+7-1~deb12u1","17.0.8~6-1","17.0.8~6-2","17.0.8~6-3","17.0.8~6-4","17.0.8~6-5","17.0.9+9-1","17.0.9+9-1~deb11u1","17.0.9+9-1~deb12u1","17.0.9+9-2","17.0.9~4ea-1","17.0.9~6ea-1","17~19-1","17~24-1","17~27-1","17~29-1","17~31ea-1","17~33ea-1","17~35ea-1"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11+9-1~deb12u1"}]}],"versions":["17.0.10+7-1","17.0.10+7-1~deb11u1","17.0.10+7-1~deb12u1","17.0.10+7-2","17.0.10+7-3","17.0.10~6ea-1","17.0.11+9-1~deb11u1","17.0.11~6ea-1","17.0.11~7ea-1","17.0.6+10-1","17.0.7+7-1","17.0.7+7-1~deb11u1","17.0.7+7-1~deb12u1","17.0.7+7-2","17.0.8+7-1","17.0.8+7-1~deb12u1","17.0.8~6-1","17.0.8~6-2","17.0.8~6-3","17.0.8~6-4","17.0.8~6-5","17.0.9+9-1","17.0.9+9-1~deb11u1","17.0.9+9-1~deb12u1","17.0.9+9-2","17.0.9~4ea-1","17.0.9~6ea-1"],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"java-1.8.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0.412.b08-1.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:9","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0.9-1.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:9","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0.9-1.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:9","package":"java-latest-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.1.0.8-1.rolling.1.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-17-openjdk-17.0.11.9-1.oe2003sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-17-openjdk-17.0.11.9-1.oe2203sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-17-openjdk-17.0.11.9-1.oe2203sp2"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-17-openjdk-17.0.11.9-1.oe2203sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-11-openjdk-11.0.23.9-2.oe2003sp4"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-11-openjdk-11.0.23.9-2.oe2203sp1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-11-openjdk-11.0.23.9-2.oe2203sp3"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-23.0.1.11-1.oe2203sp3"}]}],"bundled":43},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-23.0.1.11-1.oe2003sp4"}]}],"bundled":43},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-23.0.1.11-1.oe2203sp1"}]}],"bundled":41},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-23.0.1.11-1.oe2403"}]}],"bundled":43},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-23.0.1.11-1.oe2203sp4"}]}],"bundled":43},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_4"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-11-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el8_6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-2.el9_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-11-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.4::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.4::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-17-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-17-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"java-21-openjdk-static-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-demo-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-demo-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-fastdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-jmods-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-jmods-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-src-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-src-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-static-libs-fastdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"java-21-openjdk-static-libs-slowdebug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.23.0.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.11.0.9-2.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el8"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:21.0.3.0.9-1.el9"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-3.75.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-3.75.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-150000.3.113.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-150400.3.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-30.123.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-30.123.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-30.123.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-1_8_0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0_sr8.25-150000.3.89.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23+9-1ubuntu1~18.04.1"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1","11.0.9.1+1-0ubuntu1~18.04","11.0.10+9-0ubuntu1~18.04","11.0.11+9-0ubuntu2~18.04","11.0.13+8-0ubuntu1~18.04","11.0.14+9-0ubuntu2~18.04","11.0.14.1+1-0ubuntu1~18.04","11.0.15+10-0ubuntu0.18.04.1","11.0.16+8-0ubuntu1~18.04","11.0.17+8-1ubuntu2~18.04","11.0.18+10-0ubuntu1~18.04.1","11.0.19+7~us1-0ubuntu1~18.04.1","11.0.20+8-1ubuntu1~18.04","11.0.20.1+1-0ubuntu1~18.04","11.0.21+9-0ubuntu1~18.04","11.0.22+7-0ubuntu2~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11+9-1~18.04.1"}]}],"versions":["17+35-1~18.04","17.0.1+12-1~18.04","17.0.2+8-1~18.04","17.0.3+7-0ubuntu0.18.04.1","17.0.4+8-1~18.04","17.0.5+8-2ubuntu1~18.04","17.0.6+10-0ubuntu1~18.04.1","17.0.7+7~us1-0ubuntu1~18.04","17.0.8+7-1~18.04","17.0.8.1+1~us1-0ubuntu1~18.04","17.0.9+9-1~18.04","17.0.10+7-1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11+9-1~20.04.2"}]}],"versions":["17+35-1~20.04","17.0.1+12-1~20.04","17.0.2+8-1~20.04","17.0.3+7-0ubuntu0.20.04.1","17.0.4+8-1~20.04","17.0.5+8-2ubuntu1~20.04","17.0.6+10-0ubuntu1~20.04.1","17.0.7+7~us1-0ubuntu1~20.04","17.0.8+7-1~20.04.2","17.0.8.1+1~us1-0ubuntu1~20.04","17.0.9+9-1~20.04","17.0.10+7-1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3+9-1ubuntu1~20.04.1"}]}],"versions":["21.0.1+12-2~20.04.1","21.0.2+13-1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23+9-1ubuntu1~20.04.2"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04","11.0.9.1+1-0ubuntu1~20.04","11.0.10+9-0ubuntu1~20.04","11.0.11+9-0ubuntu2~20.04","11.0.13+8-0ubuntu1~20.04","11.0.14+9-0ubuntu2~20.04","11.0.14.1+1-0ubuntu1~20.04","11.0.15+10-0ubuntu0.20.04.1","11.0.16+8-0ubuntu1~20.04","11.0.17+8-1ubuntu2~20.04","11.0.18+10-0ubuntu1~20.04.1","11.0.19+7~us1-0ubuntu1~20.04.1","11.0.20+8-1ubuntu1~20.04","11.0.20.1+1-0ubuntu1~20.04","11.0.21+9-0ubuntu1~20.04","11.0.22+7-0ubuntu2~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13+33-1","13.0.1+9-2","13.0.2+8-1","13.0.2+8-2","13.0.3+3-1ubuntu2","13.0.4+8-1~20.04","13.0.7+5-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.0.1+9-1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11+9-1~22.04.1"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.2+8-1","17.0.3+7-0ubuntu0.22.04.1","17.0.4+8-1~22.04","17.0.5+8-2ubuntu1~22.04","17.0.6+10-0ubuntu1~22.04","17.0.7+7~us1-0ubuntu1~22.04.2","17.0.8+7-1~22.04","17.0.8.1+1~us1-0ubuntu1~22.04","17.0.9+9-1~22.04","17.0.10+7-1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18~15ea-4","18~20ea-1","18~32ea-1","18~36ea-1","18.0.2+9-2~22.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3+9-1ubuntu1~22.04.1"}]}],"versions":["21.0.1+12-2~22.04","21.0.2+13-1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23+9-1ubuntu1~22.04.1"}]}],"versions":["11.0.12+7-0ubuntu3","11.0.13+8-0ubuntu1","11.0.14+9-0ubuntu2","11.0.14.1+1-0ubuntu1","11.0.15+10-0ubuntu0.22.04.1","11.0.16+8-0ubuntu1~22.04","11.0.17+8-1ubuntu2~22.04","11.0.18+10-0ubuntu1~22.04","11.0.19+7~us1-0ubuntu1~22.04.1","11.0.20+8-1ubuntu1~22.04","11.0.20.1+1-0ubuntu1~22.04","11.0.21+9-0ubuntu1~22.04","11.0.22+7-0ubuntu2~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23+9-1ubuntu1~18.04.1"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1","11.0.9.1+1-0ubuntu1~18.04","11.0.10+9-0ubuntu1~18.04","11.0.11+9-0ubuntu2~18.04","11.0.13+8-0ubuntu1~18.04","11.0.14+9-0ubuntu2~18.04","11.0.14.1+1-0ubuntu1~18.04","11.0.15+10-0ubuntu0.18.04.1","11.0.16+8-0ubuntu1~18.04","11.0.17+8-1ubuntu2~18.04","11.0.18+10-0ubuntu1~18.04.1","11.0.19+7~us1-0ubuntu1~18.04.1","11.0.20+8-1ubuntu1~18.04","11.0.20.1+1-0ubuntu1~18.04","11.0.21+9-0ubuntu1~18.04","11.0.22+7-0ubuntu2~18.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23+9-1ubuntu1~20.04.2"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04","11.0.9.1+1-0ubuntu1~20.04","11.0.10+9-0ubuntu1~20.04","11.0.11+9-0ubuntu2~20.04","11.0.13+8-0ubuntu1~20.04","11.0.14+9-0ubuntu2~20.04","11.0.14.1+1-0ubuntu1~20.04","11.0.15+10-0ubuntu0.20.04.1","11.0.16+8-0ubuntu1~20.04","11.0.17+8-1ubuntu2~20.04","11.0.18+10-0ubuntu1~20.04.1","11.0.19+7~us1-0ubuntu1~20.04.1","11.0.20+8-1ubuntu1~20.04","11.0.20.1+1-0ubuntu1~20.04","11.0.21+9-0ubuntu1~20.04","11.0.22+7-0ubuntu2~20.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23+9-1ubuntu1~22.04.1"}]}],"versions":["11.0.12+7-0ubuntu3","11.0.13+8-0ubuntu1","11.0.14+9-0ubuntu2","11.0.14.1+1-0ubuntu1","11.0.15+10-0ubuntu0.22.04.1","11.0.16+8-0ubuntu1~22.04","11.0.17+8-1ubuntu2~22.04","11.0.18+10-0ubuntu1~22.04","11.0.19+7~us1-0ubuntu1~22.04.1","11.0.20+8-1ubuntu1~22.04","11.0.20.1+1-0ubuntu1~22.04","11.0.21+9-0ubuntu1~22.04","11.0.22+7-0ubuntu2~22.04.1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11+9-1~18.04.1"}]}],"versions":["17+35-1~18.04","17.0.1+12-1~18.04","17.0.2+8-1~18.04","17.0.3+7-0ubuntu0.18.04.1","17.0.4+8-1~18.04","17.0.5+8-2ubuntu1~18.04","17.0.6+10-0ubuntu1~18.04.1","17.0.7+7~us1-0ubuntu1~18.04","17.0.8+7-1~18.04","17.0.8.1+1~us1-0ubuntu1~18.04","17.0.9+9-1~18.04","17.0.10+7-1~18.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11+9-1~20.04.2"}]}],"versions":["17+35-1~20.04","17.0.1+12-1~20.04","17.0.2+8-1~20.04","17.0.3+7-0ubuntu0.20.04.1","17.0.4+8-1~20.04","17.0.5+8-2ubuntu1~20.04","17.0.6+10-0ubuntu1~20.04.1","17.0.7+7~us1-0ubuntu1~20.04","17.0.8+7-1~20.04.2","17.0.8.1+1~us1-0ubuntu1~20.04","17.0.9+9-1~20.04","17.0.10+7-1~20.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11+9-1~22.04.1"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.2+8-1","17.0.3+7-0ubuntu0.22.04.1","17.0.4+8-1~22.04","17.0.5+8-2ubuntu1~22.04","17.0.6+10-0ubuntu1~22.04","17.0.7+7~us1-0ubuntu1~22.04.2","17.0.8+7-1~22.04","17.0.8.1+1~us1-0ubuntu1~22.04","17.0.9+9-1~22.04","17.0.10+7-1~22.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3+9-1ubuntu1~20.04.1"}]}],"versions":["21.0.1+12-2~20.04.1","21.0.2+13-1~20.04.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3+9-1ubuntu1~22.04.1"}]}],"versions":["21.0.1+12-2~22.04","21.0.2+13-1~22.04.1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-17-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-21-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3.0-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-22-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.0.1.0-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.23.0-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-17-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.11.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-21-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.3.0-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"java-11-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.26.0-bp156.4.3.1"}]}],"bundled":58},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-11-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.26.0-bp156.4.3.1"}]}],"bundled":58},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"java-17-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.14.0-bp156.3.3.1"}]}],"bundled":47},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"java-17-openj9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.14.0-bp156.3.3.1"}]}],"bundled":47}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"data_infrastructure_insights_acquisition_unit"},{"vendor":"netapp","product":"data_infrastructure_insights_storage_workload_security_agent"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"oracle","product":"graalvm"},{"vendor":"oracle","product":"graalvm_for_jdk"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle corporation","product":"java se jdk and jre"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuapr2024.html","tags":["vendor-advisory","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00014.html","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240426-0004/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21012","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240426-0004"},{"url":"https://github.com/advisories/GHSA-ccmh-gwpx-35xj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-21012","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1822","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21011","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21012","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21068","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21085","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21094","tags":["report"]},{"url":"https://bugzilla.redhat.com/2274975","tags":["report"]},{"url":"https://bugzilla.redhat.com/2274977","tags":["report"]},{"url":"https://bugzilla.redhat.com/2275001","tags":["report"]},{"url":"https://bugzilla.redhat.com/2275003","tags":["report"]},{"url":"https://bugzilla.redhat.com/2275005","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-1822.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1822.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1825","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-1825.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1825.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1828","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-1828.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21094.html","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1828.html","tags":["advisory"]},{"url":"https://openjdk.org/groups/vulnerability/advisories/2024-04-16","tags":["web"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1726773559.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1734708244.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1753799434.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-21012","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0179.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33117","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1817","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1819","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1823","tags":["web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixJAVA","tags":["web","article"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1684","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21068","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1685","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1686","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1687","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21085","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21094","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2485","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14562","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14573","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14664","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42950","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20919","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20925","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20952","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21005","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21210","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21211","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21217","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21235","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2486","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2487","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2488","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2489","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1821","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275005","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1821.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21011","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21012","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21068","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21085","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21094","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1822.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1825.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1828.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:1822","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:1825","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:1828","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241452-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213470","tags":["report"]},{"url":"https://bugzilla.suse.com/1222979","tags":["report"]},{"url":"https://bugzilla.suse.com/1222983","tags":["report"]},{"url":"https://bugzilla.suse.com/1222984","tags":["report"]},{"url":"https://bugzilla.suse.com/1222986","tags":["report"]},{"url":"https://bugzilla.suse.com/1222987","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21094","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241498-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241498-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241499-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241499-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241845-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1223470","tags":["report"]},{"url":"https://bugzilla.suse.com/1224164","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38264","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241859-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-21012","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6811-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6812-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6813-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-21011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-21068","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-21085","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-21094","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GS63GCBRVH7N4JEIZNQAPVFNNVB2OGSU/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181239","tags":["report"]},{"url":"https://bugzilla.suse.com/1185055","tags":["report"]},{"url":"https://bugzilla.suse.com/1185056","tags":["report"]},{"url":"https://bugzilla.suse.com/1188564","tags":["report"]},{"url":"https://bugzilla.suse.com/1188565","tags":["report"]},{"url":"https://bugzilla.suse.com/1188566","tags":["report"]},{"url":"https://bugzilla.suse.com/1191901","tags":["report"]},{"url":"https://bugzilla.suse.com/1191903","tags":["report"]},{"url":"https://bugzilla.suse.com/1191904","tags":["report"]},{"url":"https://bugzilla.suse.com/1191906","tags":["report"]},{"url":"https://bugzilla.suse.com/1191909","tags":["report"]},{"url":"https://bugzilla.suse.com/1191910","tags":["report"]},{"url":"https://bugzilla.suse.com/1191911","tags":["report"]},{"url":"https://bugzilla.suse.com/1191912","tags":["report"]},{"url":"https://bugzilla.suse.com/1191913","tags":["report"]},{"url":"https://bugzilla.suse.com/1191914","tags":["report"]},{"url":"https://bugzilla.suse.com/1194925","tags":["report"]},{"url":"https://bugzilla.suse.com/1194926","tags":["report"]},{"url":"https://bugzilla.suse.com/1194927","tags":["report"]},{"url":"https://bugzilla.suse.com/1194928","tags":["report"]},{"url":"https://bugzilla.suse.com/1194929","tags":["report"]},{"url":"https://bugzilla.suse.com/1194930","tags":["report"]},{"url":"https://bugzilla.suse.com/1194931","tags":["report"]},{"url":"https://bugzilla.suse.com/1194932","tags":["report"]},{"url":"https://bugzilla.suse.com/1194933","tags":["report"]},{"url":"https://bugzilla.suse.com/1194934","tags":["report"]},{"url":"https://bugzilla.suse.com/1194935","tags":["report"]},{"url":"https://bugzilla.suse.com/1194937","tags":["report"]},{"url":"https://bugzilla.suse.com/1194939","tags":["report"]},{"url":"https://bugzilla.suse.com/1194940","tags":["report"]},{"url":"https://bugzilla.suse.com/1194941","tags":["report"]},{"url":"https://bugzilla.suse.com/1198671","tags":["report"]},{"url":"https://bugzilla.suse.com/1198672","tags":["report"]},{"url":"https://bugzilla.suse.com/1198673","tags":["report"]},{"url":"https://bugzilla.suse.com/1198674","tags":["report"]},{"url":"https://bugzilla.suse.com/1198675","tags":["report"]},{"url":"https://bugzilla.suse.com/1198935","tags":["report"]},{"url":"https://bugzilla.suse.com/1201684","tags":["report"]},{"url":"https://bugzilla.suse.com/1201692","tags":["report"]},{"url":"https://bugzilla.suse.com/1201694","tags":["report"]},{"url":"https://bugzilla.suse.com/1204468","tags":["report"]},{"url":"https://bugzilla.suse.com/1204471","tags":["report"]},{"url":"https://bugzilla.suse.com/1204472","tags":["report"]},{"url":"https://bugzilla.suse.com/1204473","tags":["report"]},{"url":"https://bugzilla.suse.com/1204475","tags":["report"]},{"url":"https://bugzilla.suse.com/1204480","tags":["report"]},{"url":"https://bugzilla.suse.com/1204703","tags":["report"]},{"url":"https://bugzilla.suse.com/1206549","tags":["report"]},{"url":"https://bugzilla.suse.com/1207246","tags":["report"]},{"url":"https://bugzilla.suse.com/1207248","tags":["report"]},{"url":"https://bugzilla.suse.com/1207922","tags":["report"]},{"url":"https://bugzilla.suse.com/1210628","tags":["report"]},{"url":"https://bugzilla.suse.com/1210631","tags":["report"]},{"url":"https://bugzilla.suse.com/1210632","tags":["report"]},{"url":"https://bugzilla.suse.com/1210634","tags":["report"]},{"url":"https://bugzilla.suse.com/1210635","tags":["report"]},{"url":"https://bugzilla.suse.com/1210636","tags":["report"]},{"url":"https://bugzilla.suse.com/1210637","tags":["report"]},{"url":"https://bugzilla.suse.com/1211615","tags":["report"]},{"url":"https://bugzilla.suse.com/1213473","tags":["report"]},{"url":"https://bugzilla.suse.com/1213474","tags":["report"]},{"url":"https://bugzilla.suse.com/1213475","tags":["report"]},{"url":"https://bugzilla.suse.com/1213481","tags":["report"]},{"url":"https://bugzilla.suse.com/1213482","tags":["report"]},{"url":"https://bugzilla.suse.com/1216374","tags":["report"]},{"url":"https://bugzilla.suse.com/1217214","tags":["report"]},{"url":"https://bugzilla.suse.com/1218903","tags":["report"]},{"url":"https://bugzilla.suse.com/1218905","tags":["report"]},{"url":"https://bugzilla.suse.com/1218906","tags":["report"]},{"url":"https://bugzilla.suse.com/1218907","tags":["report"]},{"url":"https://bugzilla.suse.com/1218909","tags":["report"]},{"url":"https://bugzilla.suse.com/1218911","tags":["report"]},{"url":"https://bugzilla.suse.com/1225470","tags":["report"]},{"url":"https://bugzilla.suse.com/1228046","tags":["report"]},{"url":"https://bugzilla.suse.com/1228047","tags":["report"]},{"url":"https://bugzilla.suse.com/1228048","tags":["report"]},{"url":"https://bugzilla.suse.com/1228050","tags":["report"]},{"url":"https://bugzilla.suse.com/1228051","tags":["report"]},{"url":"https://bugzilla.suse.com/1228052","tags":["report"]},{"url":"https://bugzilla.suse.com/1231702","tags":["report"]},{"url":"https://bugzilla.suse.com/1231711","tags":["report"]},{"url":"https://bugzilla.suse.com/1231716","tags":["report"]},{"url":"https://bugzilla.suse.com/1231719","tags":["report"]},{"url":"https://bugzilla.suse.com/1236278","tags":["report"]},{"url":"https://bugzilla.suse.com/1236804","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-39399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21930","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-21968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21235","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21502","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XA5CCGSPUXUTQHDG25O5DM4G37BLRUMN/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213479","tags":["report"]},{"url":"https://bugzilla.suse.com/1216339","tags":["report"]},{"url":"https://bugzilla.suse.com/1218908","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-20932","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-21012","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2024-04-16T21:26:02.245Z","modified":"2025-02-13T17:32:57.011Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:05.077718Z"}],"euvd":[{"id":"EUVD-2024-18726","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2024-04-16T21:26:02Z","modified":"2025-02-13T17:32:57Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T00:03:47.088299Z"}],"ghsa":[{"id":"GHSA-ccmh-gwpx-35xj","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2024-04-17T00:30:54Z","modified":"2024-11-13T21:30:31Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:58:49.226785Z"}],"nvd":[{"id":"CVE-2024-21012","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2024-04-16T22:15:15.617Z","modified":"2026-06-17T07:08:21.367Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:09:52.184911Z"}],"osv":[{"id":"ALPINE-CVE-2024-21012","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2024-04-16T22:15:15.617Z","modified":"2026-11-03T06:32:59.700941111Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"CVE-2024-21012","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2024-04-16T22:15:15.617Z","modified":"2026-05-08T07:56:36.486489819Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:38.577405Z"},{"id":"DEBIAN-CVE-2024-21012","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2024-04-16T22:15:15.617Z","modified":"2026-11-02T12:00:56.14410358Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2024-1684","title":"openjdk-17 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)","status":"published","published":"2024-05-31T11:07:08Z","modified":"2026-08-18T01:17:23.443726328Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1685","title":"openjdk-17 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)","status":"published","published":"2024-05-31T11:07:08Z","modified":"2026-08-18T01:17:23.148520261Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1686","title":"openjdk-17 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)","status":"published","published":"2024-05-31T11:07:09Z","modified":"2026-08-18T01:17:23.110829734Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1687","title":"openjdk-17 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)","status":"published","published":"2024-05-31T11:07:09Z","modified":"2026-08-18T01:17:23.071357334Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1704","title":"openjdk-11 security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)","status":"published","published":"2024-06-07T11:07:10Z","modified":"2026-08-18T01:17:24.449755915Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-2485","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14578)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14581)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2020-14593)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14621)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).(CVE-2020-14664)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-22025)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-22081)\r\n\r\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-42950)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20919)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20921)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20922)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).(CVE-2024-20923)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20925)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20945)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20952)\r\n\r\nVulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2024-20955)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21002)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21003)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21004)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21005)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21131)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21138)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21140)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21144)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21145)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-21147)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21208)\r\n\r\nVulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21210)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21211)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21217)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21235)","status":"published","published":"2024-11-29T11:07:57Z","modified":"2026-08-18T01:18:42.66591819Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2486","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14578)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14581)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2020-14593)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14621)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).(CVE-2020-14664)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-22025)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-22081)\r\n\r\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-42950)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20919)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20921)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20922)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).(CVE-2024-20923)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20925)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20945)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20952)\r\n\r\nVulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2024-20955)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21002)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21003)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21004)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21005)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21131)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21138)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21140)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21144)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21145)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-21147)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21208)\r\n\r\nVulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21210)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21211)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21217)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21235)","status":"published","published":"2024-11-29T11:07:58Z","modified":"2026-08-18T01:18:42.723885544Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2487","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14578)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14581)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2020-14593)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14621)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).(CVE-2020-14664)\r\n\r\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-42950)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20919)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20921)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20922)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).(CVE-2024-20923)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20925)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20945)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20952)\r\n\r\nVulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2024-20955)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21002)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21003)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21004)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21005)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21131)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21138)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21140)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21144)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21145)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-21147)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21208)\r\n\r\nVulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21210)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21211)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21217)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21235)","status":"published","published":"2024-11-29T11:07:58Z","modified":"2026-08-18T01:18:42.645392557Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2488","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14578)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14581)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2020-14593)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14621)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).(CVE-2020-14664)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-22025)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-22081)\r\n\r\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-42950)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20919)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20921)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20922)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).(CVE-2024-20923)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20925)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20945)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20952)\r\n\r\nVulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2024-20955)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21002)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21003)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21004)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21005)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21131)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21138)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21140)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21144)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21145)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-21147)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21208)\r\n\r\nVulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21210)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21211)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21217)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21235)","status":"published","published":"2024-11-29T11:07:58Z","modified":"2026-08-18T01:18:42.672281702Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2489","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14578)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14581)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2020-14593)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14621)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).(CVE-2020-14664)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-22025)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-22081)\r\n\r\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-42950)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20919)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20921)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20922)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).(CVE-2024-20923)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20925)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20945)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20952)\r\n\r\nVulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2024-20955)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21002)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21003)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21004)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21005)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21131)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21138)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21140)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21144)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21145)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-21147)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21208)\r\n\r\nVulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21210)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21211)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21217)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21235)","status":"published","published":"2024-11-29T11:07:58Z","modified":"2026-08-18T01:18:41.558739003Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHSA-2024:1821","title":"Red Hat Security Advisory: java-11-openjdk security update","status":"published","published":"2024-09-16T18:59:00Z","modified":"2026-09-16T10:04:29Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1822","title":"Red Hat Security Advisory: java-11-openjdk security update","status":"published","published":"2024-09-16T18:59:17Z","modified":"2026-09-16T10:04:29Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1825","title":"Red Hat Security Advisory: java-17-openjdk security update","status":"published","published":"2024-09-16T18:57:40Z","modified":"2026-09-16T10:04:30Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1828","title":"Red Hat Security Advisory: java-21-openjdk security update","status":"published","published":"2024-09-16T18:58:49Z","modified":"2026-09-16T10:04:31Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RLSA-2024:1825","title":"Moderate: java-17-openjdk security update","description":"The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)\n\n* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)\n\n* OpenJDK: C2 compilation fails with \"Exceeded _node_regs array\" (8317507) (CVE-2024-21094)\n\n* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T19:38:06.715958Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2024-21012","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2024-04-16T22:15:00Z","modified":"2026-02-04T03:11:21.270624Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"ALSA-2024:1822","title":"Moderate: java-11-openjdk security update","description":"The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)\n* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)\n* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)\n* OpenJDK: C2 compilation fails with \"Exceeded _node_regs array\" (8317507) (CVE-2024-21094)\n* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-22T00:00:00Z","modified":"2026-10-29T11:15:03.403898089Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:1825","title":"Moderate: java-17-openjdk security update","description":"The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)\n* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)\n* OpenJDK: C2 compilation fails with \"Exceeded _node_regs array\" (8317507) (CVE-2024-21094)\n* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-18T00:00:00Z","modified":"2026-10-29T11:15:08.659107208Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:1828","title":"Moderate: java-21-openjdk security update","description":"The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)\n* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)\n* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-18T00:00:00Z","modified":"2026-10-31T08:43:15.988730966Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"BIT-java-2024-21012","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2026-05-06T14:44:27.907Z","modified":"2026-09-08T08:47:59.42606789Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-java-min-2024-21012","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2026-05-06T14:44:31.308Z","modified":"2026-09-08T08:47:55.424023412Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2024-21012","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","status":"published","published":"2026-05-08T05:46:04.208Z","modified":"2026-09-08T08:48:05.707338058Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"CLSA-2024-1726773559","title":"Fix of 5 CVEs","description":"   * Backport upstream's fixes from OpenJDK 11.0.23 release.\n     - CVE-2024-21011: possible crash on long exception message in Hotspot.\n     - CVE-2024-21012: incorrect performing a reverse DNS query\n       in ConnectionPool class.\n     - CVE-2024-21068: incorrect applying an unsigned integer left shift\n       in Hotspot.\n     - CVE-2024-21085: incorrect memory size validation by the NativeUnpack class.\n     - CVE-2024-21094: possible C2 compilation error due to incorrect size\n       validation and out of bounds array access in Hotspot.","status":"published","published":"2024-09-19T19:19:33Z","modified":"2026-06-04T10:04:23.483284Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1734708244","title":"Fix of 15 CVEs","description":"   * OpenJDK 11.0.25 release, build 9.\n     - CVE-2024-21131, CVE-2024-21138, CVE-2024-21140, CVE-2024-21144,\n       CVE-2024-21145, CVE-2024-21147, CVE-2024-21208, CVE-2024-21210,\n       CVE-2024-21217, CVE-2024-21235.\n     - Release notes:\n       https://mail.openjdk.org/pipermail/jdk-updates-dev/2024-October/038512.html\n     - d/control, d/rules: bump dependency from jtreg6 to jtreg7\n     - d/rules: build --without-jtreg if with_check is false,\n       change location of --with-jtreg, change definition\n       of min_jtreg_version\n   * Adjust patches\n     - debian/patches/jtreg-location.diff (removed from d/p/series)\n     - debian/patches/reproducible-javadoc-timestamp.diff\n     - debian/patches/reproducible-copyright-headers.diff\n     - debian/patches/nss-limited-ecc-tests.patch (added from Debian sources)\n   * Remove patches that became part of the update\n     - debian/patches/CVE-2024-21011.patch\n     - debian/patches/CVE-2024-21012.patch\n     - debian/patches/CVE-2024-21068.patch\n     - debian/patches/CVE-2024-21085.patch\n     - debian/patches/CVE-2024-21094.patch","status":"published","published":"2024-12-20T15:24:23Z","modified":"2026-06-04T10:03:32.548389158Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2025-1753799434","title":"java-1.8.0-openjdk: Fix of 19 CVEs","description":"- Security fixes from OpenJDK 8u452-b09:\n - CVE-2025-21587: JSSE issue allowing remote access or modification of sensitive data\n - CVE-2025-30698: allows limited data access and partial DoS via untrusted Java code\n - CVE-2025-30691: allows limited data access via untrusted code using compiler APIs\n- Security fixes from OpenJDK 8u442-b06:\n - CVE-2025-21502: hotspot vulnerability enabling limited data access java clients\n- Security fixes from OpenJDK 8u432-b06:\n - CVE-2024-21235: sandbox bypass in java clients via exposed APIs\n - CVE-2024-21208: network flaw in sandboxed java clients enabling limited DoS\n - CVE-2024-21210: enabling data modification in sandboxed clients via crafted API input\n - CVE-2024-21217: serialization flaw may trigger partial DoS in sandboxed environments\n- Security fixes from OpenJDK 8u422-b05:\n - CVE-2024-21147: hotspot issue may lead to unauthorized access of sensitive data\n - CVE-2024-21145: enable limited unauthorized data access via untrusted java code\n - CVE-2024-21140: expose limited data to unauthorized read/write via sandboxed java code\n - CVE-2024-21144: allow remote unauthenticated attacker to cause partial DoS\n - CVE-2024-21131: remote access via API may lead to limited data modification\n - CVE-2024-21138: remote API calls may trigger partial DoS in sandboxed java environments\n- Security fixes from OpenJDK 8u412-b08:\n - CVE-2024-21094: lead to unauthorized data changes in sandboxed java apps\n - CVE-2024-21085: concurrency flaw may cause partial DoS in sandboxed java environments\n - CVE-2024-21011: hotspot issue may trigger partial DoS in sandboxed java environments\n - CVE-2024-21068: lead to limited unauthorized data modification in sandboxed deployments\n - CVE-2024-21012: networking issue may allow limited data modification","status":"published","published":"2025-07-29T14:30:38Z","modified":"2026-10-21T10:46:15.69122103Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"DLA-3793-1","title":"openjdk-11 - security update","status":"published","published":"2024-04-22T00:00:00Z","modified":"2026-03-09T01:22:18.626264Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5671-1","title":"openjdk-11 - security update","status":"published","published":"2024-04-22T00:00:00Z","modified":"2026-03-09T02:09:49.825902Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"DSA-5672-1","title":"openjdk-17 - security update","status":"published","published":"2024-04-22T00:00:00Z","modified":"2026-03-09T02:11:16.018679Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0179","title":"Updated java-1.8.0, java-11, java-17, java-latest packages fix security vulnerabilities","description":"Long Exception message leading to crash. (CVE-2024-21011)\nHTTP/2 client improper reverse DNS lookup. (CVE-2024-21012)\nInteger overflow in C1 compiler address generation. (CVE-2024-21068)\nPack200 excessive memory allocation. (CVE-2024-21085)\nC2 compilation fails with \"Exceeded _node_regs array\". (CVE-2024-21094)\n","status":"published","published":"2024-05-16T17:29:32Z","modified":"2026-04-16T04:41:24.86295441Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13871-1","title":"java-11-openjdk-11.0.23.0-1.1 on GA media","description":"These are all security issues fixed in the java-11-openjdk-11.0.23.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:55:31.749258Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:13872-1","title":"java-17-openjdk-17.0.11.0-1.1 on GA media","description":"These are all security issues fixed in the java-17-openjdk-17.0.11.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:48:39.367434Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:13873-1","title":"java-21-openjdk-21.0.3.0-1.1 on GA media","description":"These are all security issues fixed in the java-21-openjdk-21.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:30:01.393391Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:13875-1","title":"java-22-openjdk-22.0.1.0-1.1 on GA media","description":"These are all security issues fixed in the java-22-openjdk-22.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:23:25.086295Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:13995-1","title":"java-11-openj9-11.0.23.0-1.1 on GA media","description":"These are all security issues fixed in the java-11-openj9-11.0.23.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:26:19.938912Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:13996-1","title":"java-17-openj9-17.0.11.0-1.1 on GA media","description":"These are all security issues fixed in the java-17-openj9-17.0.11.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:31:42.308732Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:13998-1","title":"java-21-openj9-21.0.3.0-1.1 on GA media","description":"These are all security issues fixed in the java-21-openj9-21.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:40:08.267017Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2025:0066-1","title":"Security update for java-11-openj9","description":"This update for java-11-openj9 fixes the following issues:\n\n- Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine\n- Including Oracle October 2024 and January 2025 CPU changes\n  * CVE-2024-21208 (boo#1231702), CVE-2024-21210 (boo#1231711),\n    CVE-2024-21217 (boo#1231716), CVE-2024-21235 (boo#1231719),\n    CVE-2025-21502 (boo#1236278)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.49/\n\n- Update to OpenJDK 11.0.24 with OpenJ9 0.46.0 virtual machine\n- Including Oracle July 2024 CPU changes\n  * CVE-2024-21131 (boo#1228046), CVE-2024-21138 (boo#1228047),\n    CVE-2024-21140 (boo#1228048), CVE-2024-21144 (boo#1228050),\n    CVE-2024-21147 (boo#1228052), CVE-2024-21145 (boo#1228051)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.46/\n\n- Update to OpenJDK 11.0.23 with OpenJ9 0.44.0 virtual machine\n- Including Oracle April 2024 CPU changes\n  * CVE-2024-21012 (boo#1222987), CVE-2024-21094 (boo#1222986),\n    CVE-2024-21011 (boo#1222979), CVE-2024-21085 (boo#1222984),\n    CVE-2024-21068 (boo#1222983)\n- Including OpenJ9/OMR specific fix:\n  * CVE-2024-3933 (boo#1225470)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.44/\n\n- Update to OpenJDK 11.0.22 with OpenJ9 0.43.0 virtual machine\n- Including Oracle January 2024 CPU changes\n  * CVE-2024-20918 (boo#1218907), CVE-2024-20919 (boo#1218903),\n    CVE-2024-20921 (boo#1218905), CVE-2024-20926 (boo#1218906),\n    CVE-2024-20945 (boo#1218909), CVE-2024-20952 (boo#1218911)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.43/\n- Remove the possibility to put back removes JavaEE modules, since\n  our Java stack does not need this hack any more\n\n- Update to OpenJDK 11.0.21 with OpenJ9 0.41.0 virtual machine\n- Including Oracle October 2023 CPU changes\n  * CVE-2023-22081, boo#1216374\n- Including Openj9 0.41.0 fixes of CVE-2023-5676, boo#1217214\n  * For other OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.41   \n\n- Update to OpenJDK 11.0.20.1 with OpenJ9 0.40.0 virtual machine\n  * JDK-8313765: Invalid CEN header (invalid zip64 extra data\n    field size)\n\n- Update to OpenJDK 11.0.20 with OpenJ9 0.40.0 virtual machine\n- Including Oracle April 2023 CPU changes\n  * CVE-2023-22006 (boo#1213473), CVE-2023-22036 (boo#1213474),\n    CVE-2023-22041 (boo#1213475), CVE-2023-22045 (boo#1213481),\n    CVE-2023-22049 (boo#1213482), CVE-2023-25193 (boo#1207922)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.40\n\n- Update to OpenJDK 11.0.19 with OpenJ9 0.38.0 virtual machine\n- Including Oracle April 2023 CPU changes\n  * CVE-2023-21930 (boo#1210628), CVE-2023-21937 (boo#1210631),\n    CVE-2023-21938 (boo#1210632), CVE-2023-21939 (boo#1210634),\n    CVE-2023-21954 (boo#1210635), CVE-2023-21967 (boo#1210636),\n    CVE-2023-21968 (boo#1210637)\n  * OpenJ9 specific vulnerability: CVE-2023-2597 (boo#1211615)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.38\n\n- Update to OpenJDK 11.0.18 with OpenJ9 0.36.1 virtual machine\n  * Including Oracle January 2023 CPU changes\n    + CVE-2023-21835, boo#1207246\n    + CVE-2023-21843, boo#1207248\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.36\n\n- Update to OpenJDK 11.0.17 with OpenJ9 0.35.0 virtual machine\n  * Including Oracle October 2022 CPU changes\n    CVE-2022-21618 (boo#1204468), CVE-2022-21619 (boo#1204473),\n    CVE-2022-21626 (boo#1204471), CVE-2022-21624 (boo#1204475),\n    CVE-2022-21628 (boo#1204472), CVE-2022-39399 (boo#1204480)\n  * Fixes OpenJ9 vulnerability boo#1204703, CVE-2022-3676\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.35\n\n- Update to OpenJDK 11.0.16 with OpenJ9 0.33.0 virtual machine\n  * Including Oracle July 2022 CPU changes\n    CVE-2022-21540 (boo#1201694), CVE-2022-21541 (boo#1201692),\n    CVE-2022-34169 (boo#1201684)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.33\n\n- Update to OpenJDK 11.0.15 with OpenJ9 0.32.0 virtual machine\n  * Fixes boo#1198935, CVE-2021-41041: unverified methods can be\n    invoked using MethodHandles\n  * Including Oracle April 2022 CPU fixes\n    CVE-2022-21426 (boo#1198672), CVE-2022-21434 (boo#1198674),\n    CVE-2022-21443 (boo#1198675), CVE-2022-21476 (boo#1198671),\n    CVE-2022-21496 (boo#1198673)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.32\n\n- Update to OpenJDK 11.0.14.1 with OpenJ9 0.30.1 virtual machine\n  * including Oracle January 2022 CPU changes (boo#1194925,\n    boo#1194926, boo#1194927, boo#1194928, boo#1194929, boo#1194930,\n    boo#1194931, boo#1194932, boo#1194933, boo#1194934, boo#1194935,\n    boo#1194937, boo#1194939, boo#1194940, boo#1194941)\n  * OpenJ9 changes see\n    https://www.eclipse.org/openj9/docs/version0.30.1\n\n- Update to OpenJDK 11.0.13 with OpenJ9 0.29.0 virtual machine\n  * including Oracle July 2021 and October 2021 CPU changes\n    (boo#1188564, boo#1188565, boo#1188566, boo#1191901,\n    boo#1191909, boo#1191910, boo#1191911, boo#1191912,\n    boo#1191913, boo#1191903, boo#1191904, boo#1191914,\n    boo#1191906)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.29\n\n- Update to OpenJDK 11.0.11 with OpenJ9 0.26.0 virtual machine\n  * including Oracle April 2021 CPU changes (boo#1185055 and\n    boo#1185056)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.26\n\n- Update to OpenJDK 11.0.10 with OpenJ9 0.24.0 virtual machine\n  * including Oracle January 2021 CPU changes (boo#1181239)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.24\n","status":"published","published":"2025-02-18T16:58:15Z","modified":"2026-02-04T04:38:47.065924Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:0067-1","title":"Security update for java-17-openj9","description":"This update for java-17-openj9 fixes the following issues:\n\n- Update to OpenJDK 17.0.14 with OpenJ9 0.49.0 virtual machine\n- Including Oracle October 2024 and January 2025 CPU changes\n  * CVE-2024-21208 (boo#1231702), CVE-2024-21210 (boo#1231711),\n    CVE-2024-21217 (boo#1231716), CVE-2024-21235 (boo#1231719),\n    CVE-2025-21502 (boo#1236278)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.49/\n\n- Update to OpenJDK 17.0.12 with OpenJ9 0.46.0 virtual machine\n- Including Oracle July 2024 CPU changes\n  * CVE-2024-21131 (boo#1228046), CVE-2024-21138 (boo#1228047),\n    CVE-2024-21140 (boo#1228048), CVE-2024-21147 (boo#1228052),\n    CVE-2024-21145 (boo#1228051)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.46/\n\n- Update to OpenJDK 17.0.11 with OpenJ9 0.44.0 virtual machine\n- Including Oracle April 2024 CPU changes\n  * CVE-2024-21012 (boo#1222987), CVE-2024-21094 (boo#1222986),\n    CVE-2024-21011 (boo#1222979), CVE-2024-21068 (boo#1222983)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.44/\n\n- Update to OpenJDK 17.0.10 with OpenJ9 0.43.0 virtual machine\n- Including Oracle January 2024 CPU changes\n  * CVE-2024-20918 (boo#1218907), CVE-2024-20919 (boo#1218903),\n    CVE-2024-20921 (boo#1218905), CVE-2024-20932 (boo#1218908),\n    CVE-2024-20945 (boo#1218909), CVE-2024-20952 (boo#1218911)\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.43/\n\n- Update to OpenJDK 17.0.9 with OpenJ9 0.41.0 virtual machine\n- Including Oracle October 2023 CPU changes\n  * CVE-2023-22081, boo#1216374\n  * CVE-2023-22025, boo#1216339\n- Including Openj9 0.41.0 fixes of CVE-2023-5676, boo#1217214\n  * For other OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.41   \n\n- Update to OpenJDK 17.0.8.1 with OpenJ9 0.40.0 virtual machine\n  * JDK-8313765: Invalid CEN header (invalid zip64 extra data\n    field size)\n\n- Update to OpenJDK 17.0.8 with OpenJ9 0.40.0 virtual machine\n- Including Oracle July 2023 CPU changes\n  * CVE-2023-22006 (boo#1213473), CVE-2023-22036 (boo#1213474),\n    CVE-2023-22041 (boo#1213475), CVE-2023-22044 (boo#1213479),\n    CVE-2023-22045 (boo#1213481), CVE-2023-22049 (boo#1213482),\n    CVE-2023-25193 (boo#1207922)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.40\n\n- Update to OpenJDK 17.0.7 with OpenJ9 0.38.0 virtual machine\n- Including Oracle April 2023 CPU changes\n  * CVE-2023-21930 (boo#1210628), CVE-2023-21937 (boo#1210631),\n    CVE-2023-21938 (boo#1210632), CVE-2023-21939 (boo#1210634),\n    CVE-2023-21954 (boo#1210635), CVE-2023-21967 (boo#1210636),\n    CVE-2023-21968 (boo#1210637)\n  * OpenJ9 specific vulnerability: CVE-2023-2597 (boo#1211615)\n  * OpenJ9 changes, see\n    https://www.eclipse.org/openj9/docs/version0.38\n\n- Update to OpenJDK 17.0.6 with OpenJ9 0.36.0 virtual machine\n  * including Oracle January 2023 CPU changes\n    + CVE-2023-21835, boo#1207246\n    + CVE-2023-21843, boo#1207248\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.36\n\n- Update to OpenJDK 17.0.5 with OpenJ9 0.35.0 virtual machine\n  * Including Oracle October 2022 CPU changes\n    CVE-2022-21618 (boo#1204468), CVE-2022-21619 (boo#1204473),\n    CVE-2022-21626 (boo#1204471), CVE-2022-21624 (boo#1204475),\n    CVE-2022-21628 (boo#1204472), CVE-2022-39399 (boo#1204480)\n  * Fixes OpenJ9 vulnerability boo#1204703, CVE-2022-3676\n  * OpenJ9 changes, see \n    https://www.eclipse.org/openj9/docs/version0.35\n","status":"published","published":"2025-02-19T22:53:13Z","modified":"2026-02-04T02:32:33.540336Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"RLSA-2024:1822","title":"Moderate: java-11-openjdk security update","description":"The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)\n\n* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)\n\n* OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)\n\n* OpenJDK: C2 compilation fails with \"Exceeded _node_regs array\" (8317507) (CVE-2024-21094)\n\n* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-06T13:04:21.002456Z","modified":"2026-02-04T07:40:22.346212Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:1828","title":"Moderate: java-21-openjdk security update","description":"The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.\n\nSecurity Fix(es):\n\n* OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)\n\n* OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)\n\n* OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-06T13:04:21.002456Z","modified":"2026-02-04T13:15:06.289038Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:1452-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\n- CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979)\n- CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS lookup (JDK-8315708,bsc#1222987)\n- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (JDK-8322122,bsc#1222983)  \n- CVE-2024-21085: Fixed denial of service due to Pack200 excessive memory allocation (JDK-8322114,bsc#1222984) \n- CVE-2024-21094: Fixed unauthorized data modification due to C2 compilation failure with 'Exceeded _node_regs array' (JDK-8317507,JDK-8325348,bsc#1222986)\n\nOther fixes:\n- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)\n  * Security fixes\n    + JDK-8318340: Improve RSA key implementations\n  * Other changes\n    + JDK-6928542: Chinese characters in RTF are not decoded\n    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/\n      /bug4517214.java fails on MacOS\n    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,\n      the combobox popup does not appear.\n    + JDK-8054022: HttpURLConnection timeouts with Expect:\n      100-Continue and no chunking\n    + JDK-8054572: [macosx] JComboBox paints the border incorrectly\n    + JDK-8058176: [mlvm] tests should not allow code cache\n      exhaustion\n    + JDK-8067651: LevelTransitionTest.java, fix trivial methods\n      levels logic\n    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005\n      intermittently times out\n    + JDK-8156889: ListKeychainStore.sh fails in some virtualized\n      environments\n    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps\n      timeouting\n    + JDK-8166554: Avoid compilation blocking in\n      OverloadCompileQueueTest.java\n    + JDK-8169475: WheelModifier.java fails by timeout\n    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh\n      to Java Jtreg Test\n    + JDK-8186610: move ModuleUtils to top-level testlibrary\n    + JDK-8192864: defmeth tests can hide failures\n    + JDK-8193543: Regression automated test '/open/test/jdk/java/\n      /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'\n      fails\n    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/\n      /isexceeded001/TestDescription.java still failing\n    + JDK-8202282: [TESTBUG] appcds TestCommon\n      .makeCommandLineForAppCDS() can be removed\n    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not\n      clean up\n    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/\n      /ChoicePopupLocation.java fails\n    + JDK-8207211: [TESTBUG] Remove excessive output from\n      CDS/AppCDS tests\n    + JDK-8207214: Broken links in JDK API serialized-form page\n    + JDK-8207855: Make applications/jcstress invoke tests in\n      batches\n    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/\n      /TestDescription.java fails in jdk/hs nightly\n    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java\n      .findDeadlock.INDIFY_Test Deadlocked threads are not always\n      detected\n    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails\n      in AUFS file system\n    + JDK-8208699: remove unneeded imports from runtime tests\n    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out\n      often in hs-tier7 testing\n    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option\n      is not always required for appcds tests\n    + JDK-8209549: remove VMPropsExt from TEST.ROOT\n    + JDK-8209595: MonitorVmStartTerminate.java timed out\n    + JDK-8209946: [TESTBUG] CDS tests should use '@run driver'\n    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java\n      looks for libjsig in wrong location\n    + JDK-8211978: Move  testlibrary/jdk/testlibrary/\n      /SimpleSSLContext.java and testkeys to network testlibrary\n    + JDK-8213622: Windows VS2013 build failure - ''snprintf':\n      identifier not found'\n    + JDK-8213926: WB_EnqueueInitializerForCompilation requests\n      compilation for NULL\n    + JDK-8213927: G1 ignores AlwaysPreTouch when\n      UseTransparentHugePages is enabled\n    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr\n      modules\n    + JDK-8214915: CtwRunner misses export for jdk.internal.access\n    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws\n      NullPointerException\n    + JDK-8217475: Unexpected StackOverflowError in 'process\n      reaper' thread\n    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest\n    + JDK-8219475: javap man page needs to be updated\n    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/\n      /JMXInterfaceBindingTest.java passes trivially when it\n      shouldn't\n    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper\n      .TestCaseImpl can't be defined in different runtime package as\n      its nest host\n    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils\n      .areAllMountPointsAccessible needs to tolerate duplicates\n    + JDK-8226706: (se) Reduce the number of outer loop iterations\n      on Windows in java/nio/channels/Selector/RacyDeregister.java\n    + JDK-8226905: unproblem list applications/ctw/modules/* tests\n      on windows\n    + JDK-8226910: make it possible to use jtreg's -match via\n      run-test framework\n    + JDK-8227438: [TESTLIB] Determine if file exists by\n      Files.exists in function FileUtils.deleteFileIfExistsWithRetry\n    + JDK-8231585: java/lang/management/ThreadMXBean/\n      /MaxDepthForThreadInfoTest.java fails with\n      java.lang.NullPointerException\n    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to\n      'FAILED: Did not get expected IllegalThreadStateException on a\n      StepRequest.enable()'\n    + JDK-8233453: MLVM deoptimize stress test timed out\n    + JDK-8234309: LFGarbageCollectedTest.java fails with parse\n      Exception\n    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/\n      /AccessibleChoiceTest.java fails\n    + JDK-8237777: 'Dumping core ...' is shown despite claiming\n      that '# No core dump will be written.'\n    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java\n      failing with LDAP response read timeout\n    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel\n    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/\n      /AccessibleChoiceTest.java fails\n    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001\n      failed due to '(IsSameObject#3) unexpected monitor object:\n      0x000000562336DBA8'\n    + JDK-8246222: Rename javac test T6395981.java to be more\n      informative\n    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code\n    + JDK-8249087: Always initialize _body[0..1] in Symbol\n      constructor\n    + JDK-8251349: Add TestCaseImpl to\n      OverloadCompileQueueTest.java's build dependencies\n    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/\n      /btree010.java fails with ClassNotFoundException:\n      nsk.sysdict.share.BTree0LLRLRLRRLR\n    + JDK-8253543: sanity/client/SwingSet/src/\n      /ButtonDemoScreenshotTest.java failed with 'AssertionError:\n      All pixels are not black'\n    + JDK-8253739: java/awt/image/MultiResolutionImage/\n      /MultiResolutionImageObserverTest.java fails\n    + JDK-8253820: Save test images and dumps with timestamps from\n      client sanity suite\n    + JDK-8255277: randomDelay in DrainDeadlockT and\n      LoggingDeadlock do not randomly delay\n    + JDK-8255546: Missing coverage for\n      javax.smartcardio.CardPermission and ResponseAPDU\n    + JDK-8255743: Relax SIGFPE match in in\n      runtime/ErrorHandling/SecondaryErrorTest.java\n    + JDK-8257505: nsk/share/test/StressOptions stressTime is\n      scaled in getter but not when printed\n    + JDK-8259801: Enable XML Signature secure validation mode by\n      default\n    + JDK-8264135: UnsafeGetStableArrayElement should account for\n      different JIT implementation details\n    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/\n      /Test.java fails with OOME due to CodeCache exhaustion.\n    + JDK-8269025: jsig/Testjsig.java doesn't check exit code\n    + JDK-8269077: TestSystemGC uses 'require vm.gc.G1' for large\n      pages subtest\n    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java\n      doesn't check exit code\n    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java\n      doesn't check exit code\n    + JDK-8271828: mark hotspot runtime/classFileParserBug tests\n      which ignore external VM flags\n    + JDK-8271829: mark hotspot runtime/Throwable tests which\n      ignore external VM flags\n    + JDK-8271890: mark hotspot runtime/Dictionary tests which\n      ignore external VM flags\n    + JDK-8272291: mark hotspot runtime/logging tests which ignore\n      external VM flags\n    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't\n      check exit codes\n    + JDK-8272551: mark hotspot runtime/modules tests which ignore\n      external VM flags\n    + JDK-8272552: mark hotspot runtime/cds tests which ignore\n      external VM flags\n    + JDK-8273803: Zero: Handle 'zero' variant in\n      CommandLineOptionTest.java\n    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java\n      fails in Windows 11\n    + JDK-8274621: NullPointerException because listenAddress[0] is\n      null\n    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails\n      with ZGC\n    + JDK-8280007: Enable Neoverse N1 optimizations for Arm\n      Neoverse V1 \u0026 N2\n    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails\n      with java.lang.RuntimeException: values differ by more than\n      1GB\n    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/\n      /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java\n      from problemlist.\n    + JDK-8281717: Cover logout method for several LoginModule\n    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless\n      recursion with RuntimeException in void ck(double x, double y)\n    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java\n      fails to compile\n    + JDK-8285756: clean up use of bad arguments for `@clean` in\n      langtools tests\n    + JDK-8285785: CheckCleanerBound test fails with\n      PasswordCallback object is not released\n    + JDK-8285867: Convert applet manual tests\n      SelectionVisible.java to Frame and automate\n    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/\n      /CustomComboBoxFocusTest.java fails on mac aarch64\n    + JDK-8286969: Add a new test library API to execute kinit in\n      SecurityTools.java\n    + JDK-8287113: JFR: Periodic task thread uses period for method\n      sampling events\n    + JDK-8289511: Improve test coverage for XPath Axes: child\n    + JDK-8289764: gc/lock tests failed with 'OutOfMemoryError:\n      Java heap space: failed reallocation of scalar replaced\n      objects'\n    + JDK-8289948: Improve test coverage for XPath functions: Node\n      Set Functions\n    + JDK-8290399: [macos] Aqua LAF does not fire an action event\n      if combo box menu is displayed\n    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests\n      failed with 'isUsageThresholdExceeded() returned false, and is\n      still false, while threshold = MMMMMMM and used peak = NNNNNNN'\n    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup\n      required permissions for jtreg version 7 jar\n    + JDK-8292946: GC lock/jni/jnilock001 test failed\n      'assert(gch-\u003egc_cause() == GCCause::_scavenge_alot ||\n      !gch-\u003eincremental_collection_failed()) failed: Twice in a row'\n    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed\n      with 'RuntimeException: Retrieved backing PlatformLogger level\n      null is not the expected CONFIG'\n    + JDK-8294158: HTML formatting for PassFailJFrame instructions\n    + JDK-8294254: [macOS] javax/swing/plaf/aqua/\n      /CustomComboBoxFocusTest.java failure\n    + JDK-8294402: Add diagnostic logging to\n      VMProps.checkDockerSupport\n    + JDK-8294535: Add screen capture functionality to\n      PassFailJFrame\n    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails\n      intermittently on a VM\n    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/\n      /AbstractDrbg/SpecTest.java intermittently timeout\n    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java\n      failed: ExceptionInInitializerError: target class not found\n    + JDK-8300269: The selected item in an editable JComboBox with\n      titled border is not visible in Aqua LAF\n    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/\n      /AwtListGarbageCollectionTest.java failed with 'List wasn't\n      garbage collected'\n    + JDK-8301310: The SendRawSysexMessage test may cause a JVM\n      crash\n    + JDK-8301377: adjust timeout for JLI\n      GetObjectSizeIntrinsicsTest.java subtest again\n    + JDK-8301846: Invalid TargetDataLine after screen lock when\n      using JFileChooser or COM library\n    + JDK-8302017: Allocate BadPaddingException only if it will be\n      thrown\n    + JDK-8302109: Trivial fixes to btree tests\n    + JDK-8302149: Speed up\n      compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java\n    + JDK-8302607: increase timeout for\n      ContinuousCallSiteTargetChange.java\n    + JDK-8304074: [JMX] Add an approximation of total bytes\n      allocated on the Java heap by the JVM\n    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373\n    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1\n    + JDK-8305502: adjust timeouts in three more M\u0026M tests\n    + JDK-8305505: NPE in javazic compiler\n    + JDK-8305972: Update XML Security for Java to 3.0.2\n    + JDK-8306072: Open source several AWT MouseInfo related tests\n    + JDK-8306076: Open source AWT misc tests\n    + JDK-8306409: Open source AWT KeyBoardFocusManger,\n      LightWeightComponent related tests\n    + JDK-8306640: Open source several AWT TextArea related tests\n    + JDK-8306652: Open source AWT MenuItem related tests\n    + JDK-8306681: Open source more AWT DnD related tests\n    + JDK-8306683: Open source several clipboard and color AWT tests\n    + JDK-8306752: Open source several container and component AWT\n      tests\n    + JDK-8306753: Open source several container AWT tests\n    + JDK-8306755: Open source few Swing JComponent and\n      AbstractButton tests\n    + JDK-8306812: Open source several AWT Miscellaneous tests\n    + JDK-8306871: Open source more AWT Drag \u0026 Drop tests\n    + JDK-8306996: Open source Swing MenuItem related tests\n    + JDK-8307123: Fix deprecation warnings in DPrinter\n    + JDK-8307130: Open source few Swing JMenu tests\n    + JDK-8307299: Move more DnD tests to open\n    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing\n      JTableHeader tests\n    + JDK-8307381: Open Source JFrame, JIF related Swing Tests\n    + JDK-8307683: Loop Predication should not hoist range checks\n      with trap on success projection by negating their condition\n    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC\n      while allocating\n    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler\n      .compile does not close files\n    + JDK-8308223: failure handler missed jcmd.vm.info command\n    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the\n      debuggee\n    + JDK-8308245: Add -proc:full to describe current default\n      annotation processing policy\n    + JDK-8308336: Test java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java failed:\n      java.net.BindException: Address already in use\n    + JDK-8309104: [JVMCI] compiler/unsafe/\n      /UnsafeGetStableArrayElement test asserts wrong values with\n      Graal\n    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton\n      predicates for all If nodes in loop predication\n    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/\n      /agentthr001/TestDescription.java crashing due to empty while\n      loop\n    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when\n      using second test directory\n    + JDK-8309870: Using -proc:full should be considered requesting\n      explicit annotation processing\n    + JDK-8310106: sun.security.ssl.SSLHandshake\n      .getHandshakeProducer() incorrectly checks handshakeConsumers\n    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/\n      /bug6889007.java fails\n    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/\n      /interrupt001.java timed out due to missing prompt\n    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java\n      timed out\n    + JDK-8311081: KeytoolReaderP12Test.java fail on localized\n      Windows platform\n    + JDK-8311511: Improve description of NativeLibrary JFR event\n    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java\n    + JDK-8313081: MonitoringSupport_lock should be unconditionally\n      initialized after 8304074\n    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in\n      makefiles\n    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/\n      /awt_Robot.cpp GetRGBPixels adjust releasing of resources\n    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground\n      release resources in early returns\n    + JDK-8313643: Update HarfBuzz to 8.2.2\n    + JDK-8313816: Accessing jmethodID might lead to spurious\n      crashes\n    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to\n      extra concurrent mark with -Xcomp\n    + JDK-8314164: java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java fails intermittently\n      in timeout\n    + JDK-8314883:\n      Java_java_util_prefs_FileSystemPreferences_lockFile0 write\n      result errno in missing case\n    + JDK-8315034: File.mkdirs() occasionally fails to create\n      folders on Windows shared folder\n    + JDK-8315042: NPE in PKCS7.parseOldSignedData\n    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some\n      cases\n    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts\n      path to devkit into libsplashscreen\n    + JDK-8315594: Open source few headless Swing misc tests\n    + JDK-8315600: Open source few more headless Swing misc tests\n    + JDK-8315602: Open source swing security manager test\n    + JDK-8315606: Open source few swing text/html tests\n    + JDK-8315611: Open source swing text/html and tree test\n    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should\n      run with -Xbatch\n    + JDK-8315731: Open source several Swing Text related tests\n    + JDK-8315761: Open source few swing JList and JMenuBar tests\n    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/\n      /bug4654927.java: component must be showing on the screen to\n      determine its location\n    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use\n      createTestJvm\n    + JDK-8316028: Update FreeType to 2.13.2\n    + JDK-8316030: Update Libpng to 1.6.40\n    + JDK-8316106: Open source few swing JInternalFrame and\n      JMenuBar tests\n    + JDK-8316461: Fix: make test outputs TEST SUCCESS after\n      unsuccessful exit\n    + JDK-8316947: Write a test to check textArea triggers\n      MouseEntered/MouseExited events properly\n    + JDK-8317307: test/jdk/com/sun/jndi/ldap/\n      /LdapPoolTimeoutTest.java fails with ConnectException:\n      Connection timed out: no further information\n    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js\n    + JDK-8318154: Improve stability of WheelModifier.java test\n    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/\n      /BootClassPathTest.sh fails on Japanese Windows\n    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails\n      with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1\n    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java\n    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni\n      tests\n    + JDK-8318608: Enable parallelism in\n      vmTestbase/nsk/stress/threads tests\n    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with\n      'transport error 202: bind failed: Address already in use'\n    + JDK-8318889: C2: add bailout after assert Bad graph detected\n      in build_loop_late\n    + JDK-8318951: Additional negative value check in JPEG decoding\n    + JDK-8318955: Add ReleaseIntArrayElements in\n      Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to\n      early return\n    + JDK-8318971: Better Error Handling for Jar Tool When\n      Processing Non-existent Files\n    + JDK-8318983: Fix comment typo in PKCS12Passwd.java\n    + JDK-8319124: Update XML Security for Java to 3.0.3\n    + JDK-8319456: jdk/jfr/event/gc/collection/\n      /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker\n      Initiated GC' not in the valid causes\n    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh\n    + JDK-8320001: javac crashes while adding type annotations to\n      the return type of a constructor\n    + JDK-8320208: Update Public Suffix List to b5bf572\n    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks\n      wrong, missed optimization opportunity\n    + JDK-8320597: RSA signature verification fails on signed data\n      that does not encode params correctly\n    + JDK-8320798: Console read line with zero out should zero out\n      underlying buffer\n    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23\n    + JDK-8320937: support latest VS2022 MSC_VER in\n      abstract_vm_version.cpp\n    + JDK-8321151: JDK-8294427 breaks Windows L\u0026F on all older\n      Windows versions\n    + JDK-8321215: Incorrect x86 instruction encoding for VSIB\n      addressing mode\n    + JDK-8321408: Add Certainly roots R1 and E1\n    + JDK-8321480: ISO 4217 Amendment 176 Update\n    + JDK-8322178: Error. can't find jdk.testlibrary\n      .SimpleSSLContext in test directory or libraries\n    + JDK-8322417: Console read line with zero out should zero out\n      when throwing exception\n    + JDK-8322725: (tz) Update Timezone Data to 2023d\n    + JDK-8322750: Test 'api/java_awt/interactive/\n      /SystemTrayTests.html' failed because A blue ball icon is\n      added outside of the system tray\n    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is\n      failing assert\n    + JDK-8322772: Clean up code after JDK-8322417\n    + JDK-8323008: filter out harmful -std* flags added by autoconf\n      from CXX\n    + JDK-8323243: JNI invocation of an abstract instance method\n      corrupts the stack\n    + JDK-8323515: Create test alias 'all' for all test roots\n    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/\n      /platform/docker/TestDockerMemoryMetrics.java always fail\n      because OOM killed\n    + JDK-8324184: Windows VS2010 build failed with 'error C2275:\n      'int64_t''\n    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and\n      newer (non-static data member initializers)\n    + JDK-8324347: Enable 'maybe-uninitialized' warning for\n      FreeType 2.13.1\n    + JDK-8324659: GHA: Generic jtreg errors are not reported\n    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/\n      /AKISerialNumber.java is failing\n    + JDK-8325150: (tz) Update Timezone Data to 2024a\n    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for\n      jni.cpp with dtrace enabled\n    + JDK-8326503: [11u] java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java fail because of\n      package org.junit.jupiter.api does not exist\n    + JDK-8327391: Add SipHash attribution file\n    + JDK-8329837: [11u] Remove designator\n      DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23\n\n- Removed the possibility to use the system timezone-java (bsc#1213470).\n\n","status":"published","published":"2024-04-26T14:40:10Z","modified":"2026-02-04T02:54:10.201471Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1498-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\n- CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979)\n- CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS lookup (JDK-8315708,bsc#1222987)\n- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (JDK-8322122,bsc#1222983)  \n- CVE-2024-21085: Fixed denial of service due to Pack200 excessive memory allocation (JDK-8322114,bsc#1222984) \n- CVE-2024-21094: Fixed unauthorized data modification due to C2 compilation failure with 'Exceeded _node_regs array' (JDK-8317507,JDK-8325348,bsc#1222986)\n\nOther fixes:\n- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)\n  * Security fixes\n    + JDK-8318340: Improve RSA key implementations\n  * Other changes\n    + JDK-6928542: Chinese characters in RTF are not decoded\n    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/\n      /bug4517214.java fails on MacOS\n    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,\n      the combobox popup does not appear.\n    + JDK-8054022: HttpURLConnection timeouts with Expect:\n      100-Continue and no chunking\n    + JDK-8054572: [macosx] JComboBox paints the border incorrectly\n    + JDK-8058176: [mlvm] tests should not allow code cache\n      exhaustion\n    + JDK-8067651: LevelTransitionTest.java, fix trivial methods\n      levels logic\n    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005\n      intermittently times out\n    + JDK-8156889: ListKeychainStore.sh fails in some virtualized\n      environments\n    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps\n      timeouting\n    + JDK-8166554: Avoid compilation blocking in\n      OverloadCompileQueueTest.java\n    + JDK-8169475: WheelModifier.java fails by timeout\n    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh\n      to Java Jtreg Test\n    + JDK-8186610: move ModuleUtils to top-level testlibrary\n    + JDK-8192864: defmeth tests can hide failures\n    + JDK-8193543: Regression automated test '/open/test/jdk/java/\n      /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'\n      fails\n    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/\n      /isexceeded001/TestDescription.java still failing\n    + JDK-8202282: [TESTBUG] appcds TestCommon\n      .makeCommandLineForAppCDS() can be removed\n    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not\n      clean up\n    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/\n      /ChoicePopupLocation.java fails\n    + JDK-8207211: [TESTBUG] Remove excessive output from\n      CDS/AppCDS tests\n    + JDK-8207214: Broken links in JDK API serialized-form page\n    + JDK-8207855: Make applications/jcstress invoke tests in\n      batches\n    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/\n      /TestDescription.java fails in jdk/hs nightly\n    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java\n      .findDeadlock.INDIFY_Test Deadlocked threads are not always\n      detected\n    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails\n      in AUFS file system\n    + JDK-8208699: remove unneeded imports from runtime tests\n    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out\n      often in hs-tier7 testing\n    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option\n      is not always required for appcds tests\n    + JDK-8209549: remove VMPropsExt from TEST.ROOT\n    + JDK-8209595: MonitorVmStartTerminate.java timed out\n    + JDK-8209946: [TESTBUG] CDS tests should use '@run driver'\n    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java\n      looks for libjsig in wrong location\n    + JDK-8211978: Move  testlibrary/jdk/testlibrary/\n      /SimpleSSLContext.java and testkeys to network testlibrary\n    + JDK-8213622: Windows VS2013 build failure - ''snprintf':\n      identifier not found'\n    + JDK-8213926: WB_EnqueueInitializerForCompilation requests\n      compilation for NULL\n    + JDK-8213927: G1 ignores AlwaysPreTouch when\n      UseTransparentHugePages is enabled\n    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr\n      modules\n    + JDK-8214915: CtwRunner misses export for jdk.internal.access\n    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws\n      NullPointerException\n    + JDK-8217475: Unexpected StackOverflowError in 'process\n      reaper' thread\n    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest\n    + JDK-8219475: javap man page needs to be updated\n    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/\n      /JMXInterfaceBindingTest.java passes trivially when it\n      shouldn't\n    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper\n      .TestCaseImpl can't be defined in different runtime package as\n      its nest host\n    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils\n      .areAllMountPointsAccessible needs to tolerate duplicates\n    + JDK-8226706: (se) Reduce the number of outer loop iterations\n      on Windows in java/nio/channels/Selector/RacyDeregister.java\n    + JDK-8226905: unproblem list applications/ctw/modules/* tests\n      on windows\n    + JDK-8226910: make it possible to use jtreg's -match via\n      run-test framework\n    + JDK-8227438: [TESTLIB] Determine if file exists by\n      Files.exists in function FileUtils.deleteFileIfExistsWithRetry\n    + JDK-8231585: java/lang/management/ThreadMXBean/\n      /MaxDepthForThreadInfoTest.java fails with\n      java.lang.NullPointerException\n    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to\n      'FAILED: Did not get expected IllegalThreadStateException on a\n      StepRequest.enable()'\n    + JDK-8233453: MLVM deoptimize stress test timed out\n    + JDK-8234309: LFGarbageCollectedTest.java fails with parse\n      Exception\n    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/\n      /AccessibleChoiceTest.java fails\n    + JDK-8237777: 'Dumping core ...' is shown despite claiming\n      that '# No core dump will be written.'\n    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java\n      failing with LDAP response read timeout\n    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel\n    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/\n      /AccessibleChoiceTest.java fails\n    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001\n      failed due to '(IsSameObject#3) unexpected monitor object:\n      0x000000562336DBA8'\n    + JDK-8246222: Rename javac test T6395981.java to be more\n      informative\n    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code\n    + JDK-8249087: Always initialize _body[0..1] in Symbol\n      constructor\n    + JDK-8251349: Add TestCaseImpl to\n      OverloadCompileQueueTest.java's build dependencies\n    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/\n      /btree010.java fails with ClassNotFoundException:\n      nsk.sysdict.share.BTree0LLRLRLRRLR\n    + JDK-8253543: sanity/client/SwingSet/src/\n      /ButtonDemoScreenshotTest.java failed with 'AssertionError:\n      All pixels are not black'\n    + JDK-8253739: java/awt/image/MultiResolutionImage/\n      /MultiResolutionImageObserverTest.java fails\n    + JDK-8253820: Save test images and dumps with timestamps from\n      client sanity suite\n    + JDK-8255277: randomDelay in DrainDeadlockT and\n      LoggingDeadlock do not randomly delay\n    + JDK-8255546: Missing coverage for\n      javax.smartcardio.CardPermission and ResponseAPDU\n    + JDK-8255743: Relax SIGFPE match in in\n      runtime/ErrorHandling/SecondaryErrorTest.java\n    + JDK-8257505: nsk/share/test/StressOptions stressTime is\n      scaled in getter but not when printed\n    + JDK-8259801: Enable XML Signature secure validation mode by\n      default\n    + JDK-8264135: UnsafeGetStableArrayElement should account for\n      different JIT implementation details\n    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/\n      /Test.java fails with OOME due to CodeCache exhaustion.\n    + JDK-8269025: jsig/Testjsig.java doesn't check exit code\n    + JDK-8269077: TestSystemGC uses 'require vm.gc.G1' for large\n      pages subtest\n    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java\n      doesn't check exit code\n    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java\n      doesn't check exit code\n    + JDK-8271828: mark hotspot runtime/classFileParserBug tests\n      which ignore external VM flags\n    + JDK-8271829: mark hotspot runtime/Throwable tests which\n      ignore external VM flags\n    + JDK-8271890: mark hotspot runtime/Dictionary tests which\n      ignore external VM flags\n    + JDK-8272291: mark hotspot runtime/logging tests which ignore\n      external VM flags\n    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't\n      check exit codes\n    + JDK-8272551: mark hotspot runtime/modules tests which ignore\n      external VM flags\n    + JDK-8272552: mark hotspot runtime/cds tests which ignore\n      external VM flags\n    + JDK-8273803: Zero: Handle 'zero' variant in\n      CommandLineOptionTest.java\n    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java\n      fails in Windows 11\n    + JDK-8274621: NullPointerException because listenAddress[0] is\n      null\n    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails\n      with ZGC\n    + JDK-8280007: Enable Neoverse N1 optimizations for Arm\n      Neoverse V1 \u0026 N2\n    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails\n      with java.lang.RuntimeException: values differ by more than\n      1GB\n    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/\n      /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java\n      from problemlist.\n    + JDK-8281717: Cover logout method for several LoginModule\n    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless\n      recursion with RuntimeException in void ck(double x, double y)\n    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java\n      fails to compile\n    + JDK-8285756: clean up use of bad arguments for `@clean` in\n      langtools tests\n    + JDK-8285785: CheckCleanerBound test fails with\n      PasswordCallback object is not released\n    + JDK-8285867: Convert applet manual tests\n      SelectionVisible.java to Frame and automate\n    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/\n      /CustomComboBoxFocusTest.java fails on mac aarch64\n    + JDK-8286969: Add a new test library API to execute kinit in\n      SecurityTools.java\n    + JDK-8287113: JFR: Periodic task thread uses period for method\n      sampling events\n    + JDK-8289511: Improve test coverage for XPath Axes: child\n    + JDK-8289764: gc/lock tests failed with 'OutOfMemoryError:\n      Java heap space: failed reallocation of scalar replaced\n      objects'\n    + JDK-8289948: Improve test coverage for XPath functions: Node\n      Set Functions\n    + JDK-8290399: [macos] Aqua LAF does not fire an action event\n      if combo box menu is displayed\n    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests\n      failed with 'isUsageThresholdExceeded() returned false, and is\n      still false, while threshold = MMMMMMM and used peak = NNNNNNN'\n    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup\n      required permissions for jtreg version 7 jar\n    + JDK-8292946: GC lock/jni/jnilock001 test failed\n      'assert(gch-\u003egc_cause() == GCCause::_scavenge_alot ||\n      !gch-\u003eincremental_collection_failed()) failed: Twice in a row'\n    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed\n      with 'RuntimeException: Retrieved backing PlatformLogger level\n      null is not the expected CONFIG'\n    + JDK-8294158: HTML formatting for PassFailJFrame instructions\n    + JDK-8294254: [macOS] javax/swing/plaf/aqua/\n      /CustomComboBoxFocusTest.java failure\n    + JDK-8294402: Add diagnostic logging to\n      VMProps.checkDockerSupport\n    + JDK-8294535: Add screen capture functionality to\n      PassFailJFrame\n    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails\n      intermittently on a VM\n    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/\n      /AbstractDrbg/SpecTest.java intermittently timeout\n    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java\n      failed: ExceptionInInitializerError: target class not found\n    + JDK-8300269: The selected item in an editable JComboBox with\n      titled border is not visible in Aqua LAF\n    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/\n      /AwtListGarbageCollectionTest.java failed with 'List wasn't\n      garbage collected'\n    + JDK-8301310: The SendRawSysexMessage test may cause a JVM\n      crash\n    + JDK-8301377: adjust timeout for JLI\n      GetObjectSizeIntrinsicsTest.java subtest again\n    + JDK-8301846: Invalid TargetDataLine after screen lock when\n      using JFileChooser or COM library\n    + JDK-8302017: Allocate BadPaddingException only if it will be\n      thrown\n    + JDK-8302109: Trivial fixes to btree tests\n    + JDK-8302149: Speed up\n      compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java\n    + JDK-8302607: increase timeout for\n      ContinuousCallSiteTargetChange.java\n    + JDK-8304074: [JMX] Add an approximation of total bytes\n      allocated on the Java heap by the JVM\n    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373\n    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1\n    + JDK-8305502: adjust timeouts in three more M\u0026M tests\n    + JDK-8305505: NPE in javazic compiler\n    + JDK-8305972: Update XML Security for Java to 3.0.2\n    + JDK-8306072: Open source several AWT MouseInfo related tests\n    + JDK-8306076: Open source AWT misc tests\n    + JDK-8306409: Open source AWT KeyBoardFocusManger,\n      LightWeightComponent related tests\n    + JDK-8306640: Open source several AWT TextArea related tests\n    + JDK-8306652: Open source AWT MenuItem related tests\n    + JDK-8306681: Open source more AWT DnD related tests\n    + JDK-8306683: Open source several clipboard and color AWT tests\n    + JDK-8306752: Open source several container and component AWT\n      tests\n    + JDK-8306753: Open source several container AWT tests\n    + JDK-8306755: Open source few Swing JComponent and\n      AbstractButton tests\n    + JDK-8306812: Open source several AWT Miscellaneous tests\n    + JDK-8306871: Open source more AWT Drag \u0026 Drop tests\n    + JDK-8306996: Open source Swing MenuItem related tests\n    + JDK-8307123: Fix deprecation warnings in DPrinter\n    + JDK-8307130: Open source few Swing JMenu tests\n    + JDK-8307299: Move more DnD tests to open\n    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing\n      JTableHeader tests\n    + JDK-8307381: Open Source JFrame, JIF related Swing Tests\n    + JDK-8307683: Loop Predication should not hoist range checks\n      with trap on success projection by negating their condition\n    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC\n      while allocating\n    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler\n      .compile does not close files\n    + JDK-8308223: failure handler missed jcmd.vm.info command\n    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the\n      debuggee\n    + JDK-8308245: Add -proc:full to describe current default\n      annotation processing policy\n    + JDK-8308336: Test java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java failed:\n      java.net.BindException: Address already in use\n    + JDK-8309104: [JVMCI] compiler/unsafe/\n      /UnsafeGetStableArrayElement test asserts wrong values with\n      Graal\n    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton\n      predicates for all If nodes in loop predication\n    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/\n      /agentthr001/TestDescription.java crashing due to empty while\n      loop\n    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when\n      using second test directory\n    + JDK-8309870: Using -proc:full should be considered requesting\n      explicit annotation processing\n    + JDK-8310106: sun.security.ssl.SSLHandshake\n      .getHandshakeProducer() incorrectly checks handshakeConsumers\n    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/\n      /bug6889007.java fails\n    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/\n      /interrupt001.java timed out due to missing prompt\n    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java\n      timed out\n    + JDK-8311081: KeytoolReaderP12Test.java fail on localized\n      Windows platform\n    + JDK-8311511: Improve description of NativeLibrary JFR event\n    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java\n    + JDK-8313081: MonitoringSupport_lock should be unconditionally\n      initialized after 8304074\n    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in\n      makefiles\n    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/\n      /awt_Robot.cpp GetRGBPixels adjust releasing of resources\n    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground\n      release resources in early returns\n    + JDK-8313643: Update HarfBuzz to 8.2.2\n    + JDK-8313816: Accessing jmethodID might lead to spurious\n      crashes\n    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to\n      extra concurrent mark with -Xcomp\n    + JDK-8314164: java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java fails intermittently\n      in timeout\n    + JDK-8314883:\n      Java_java_util_prefs_FileSystemPreferences_lockFile0 write\n      result errno in missing case\n    + JDK-8315034: File.mkdirs() occasionally fails to create\n      folders on Windows shared folder\n    + JDK-8315042: NPE in PKCS7.parseOldSignedData\n    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some\n      cases\n    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts\n      path to devkit into libsplashscreen\n    + JDK-8315594: Open source few headless Swing misc tests\n    + JDK-8315600: Open source few more headless Swing misc tests\n    + JDK-8315602: Open source swing security manager test\n    + JDK-8315606: Open source few swing text/html tests\n    + JDK-8315611: Open source swing text/html and tree test\n    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should\n      run with -Xbatch\n    + JDK-8315731: Open source several Swing Text related tests\n    + JDK-8315761: Open source few swing JList and JMenuBar tests\n    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/\n      /bug4654927.java: component must be showing on the screen to\n      determine its location\n    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use\n      createTestJvm\n    + JDK-8316028: Update FreeType to 2.13.2\n    + JDK-8316030: Update Libpng to 1.6.40\n    + JDK-8316106: Open source few swing JInternalFrame and\n      JMenuBar tests\n    + JDK-8316461: Fix: make test outputs TEST SUCCESS after\n      unsuccessful exit\n    + JDK-8316947: Write a test to check textArea triggers\n      MouseEntered/MouseExited events properly\n    + JDK-8317307: test/jdk/com/sun/jndi/ldap/\n      /LdapPoolTimeoutTest.java fails with ConnectException:\n      Connection timed out: no further information\n    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js\n    + JDK-8318154: Improve stability of WheelModifier.java test\n    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/\n      /BootClassPathTest.sh fails on Japanese Windows\n    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails\n      with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1\n    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java\n    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni\n      tests\n    + JDK-8318608: Enable parallelism in\n      vmTestbase/nsk/stress/threads tests\n    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with\n      'transport error 202: bind failed: Address already in use'\n    + JDK-8318889: C2: add bailout after assert Bad graph detected\n      in build_loop_late\n    + JDK-8318951: Additional negative value check in JPEG decoding\n    + JDK-8318955: Add ReleaseIntArrayElements in\n      Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to\n      early return\n    + JDK-8318971: Better Error Handling for Jar Tool When\n      Processing Non-existent Files\n    + JDK-8318983: Fix comment typo in PKCS12Passwd.java\n    + JDK-8319124: Update XML Security for Java to 3.0.3\n    + JDK-8319456: jdk/jfr/event/gc/collection/\n      /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker\n      Initiated GC' not in the valid causes\n    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh\n    + JDK-8320001: javac crashes while adding type annotations to\n      the return type of a constructor\n    + JDK-8320208: Update Public Suffix List to b5bf572\n    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks\n      wrong, missed optimization opportunity\n    + JDK-8320597: RSA signature verification fails on signed data\n      that does not encode params correctly\n    + JDK-8320798: Console read line with zero out should zero out\n      underlying buffer\n    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23\n    + JDK-8320937: support latest VS2022 MSC_VER in\n      abstract_vm_version.cpp\n    + JDK-8321151: JDK-8294427 breaks Windows L\u0026F on all older\n      Windows versions\n    + JDK-8321215: Incorrect x86 instruction encoding for VSIB\n      addressing mode\n    + JDK-8321408: Add Certainly roots R1 and E1\n    + JDK-8321480: ISO 4217 Amendment 176 Update\n    + JDK-8322178: Error. can't find jdk.testlibrary\n      .SimpleSSLContext in test directory or libraries\n    + JDK-8322417: Console read line with zero out should zero out\n      when throwing exception\n    + JDK-8322725: (tz) Update Timezone Data to 2023d\n    + JDK-8322750: Test 'api/java_awt/interactive/\n      /SystemTrayTests.html' failed because A blue ball icon is\n      added outside of the system tray\n    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is\n      failing assert\n    + JDK-8322772: Clean up code after JDK-8322417\n    + JDK-8323008: filter out harmful -std* flags added by autoconf\n      from CXX\n    + JDK-8323243: JNI invocation of an abstract instance method\n      corrupts the stack\n    + JDK-8323515: Create test alias 'all' for all test roots\n    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/\n      /platform/docker/TestDockerMemoryMetrics.java always fail\n      because OOM killed\n    + JDK-8324184: Windows VS2010 build failed with 'error C2275:\n      'int64_t''\n    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and\n      newer (non-static data member initializers)\n    + JDK-8324347: Enable 'maybe-uninitialized' warning for\n      FreeType 2.13.1\n    + JDK-8324659: GHA: Generic jtreg errors are not reported\n    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/\n      /AKISerialNumber.java is failing\n    + JDK-8325150: (tz) Update Timezone Data to 2024a\n    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for\n      jni.cpp with dtrace enabled\n    + JDK-8326503: [11u] java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java fail because of\n      package org.junit.jupiter.api does not exist\n    + JDK-8327391: Add SipHash attribution file\n    + JDK-8329837: [11u] Remove designator\n      DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23\n\n- Removed the possibility to use the system timezone-java (bsc#1213470)\n\n","status":"published","published":"2024-05-06T07:42:13Z","modified":"2025-05-02T04:36:21.925823Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1498-2","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\n- CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979)\n- CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS lookup (JDK-8315708,bsc#1222987)\n- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (JDK-8322122,bsc#1222983)  \n- CVE-2024-21085: Fixed denial of service due to Pack200 excessive memory allocation (JDK-8322114,bsc#1222984) \n- CVE-2024-21094: Fixed unauthorized data modification due to C2 compilation failure with 'Exceeded _node_regs array' (JDK-8317507,JDK-8325348,bsc#1222986)\n\nOther fixes:\n- Upgrade to upstream tag jdk-11.0.23+9 (April 2024 CPU)\n  * Security fixes\n    + JDK-8318340: Improve RSA key implementations\n  * Other changes\n    + JDK-6928542: Chinese characters in RTF are not decoded\n    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/\n      /bug4517214.java fails on MacOS\n    + JDK-7148092: [macosx] When Alt+down arrow key is pressed,\n      the combobox popup does not appear.\n    + JDK-8054022: HttpURLConnection timeouts with Expect:\n      100-Continue and no chunking\n    + JDK-8054572: [macosx] JComboBox paints the border incorrectly\n    + JDK-8058176: [mlvm] tests should not allow code cache\n      exhaustion\n    + JDK-8067651: LevelTransitionTest.java, fix trivial methods\n      levels logic\n    + JDK-8068225: nsk/jdi/EventQueue/remove_l/remove_l005\n      intermittently times out\n    + JDK-8156889: ListKeychainStore.sh fails in some virtualized\n      environments\n    + JDK-8166275: vm/mlvm/meth/stress/compiler/deoptimize keeps\n      timeouting\n    + JDK-8166554: Avoid compilation blocking in\n      OverloadCompileQueueTest.java\n    + JDK-8169475: WheelModifier.java fails by timeout\n    + JDK-8180266: Convert sun/security/provider/KeyStore/DKSTest.sh\n      to Java Jtreg Test\n    + JDK-8186610: move ModuleUtils to top-level testlibrary\n    + JDK-8192864: defmeth tests can hide failures\n    + JDK-8193543: Regression automated test '/open/test/jdk/java/\n      /awt/TrayIcon/SystemTrayInstance/SystemTrayInstanceTest.java'\n      fails\n    + JDK-8198668: MemoryPoolMBean/isUsageThresholdExceeded/\n      /isexceeded001/TestDescription.java still failing\n    + JDK-8202282: [TESTBUG] appcds TestCommon\n      .makeCommandLineForAppCDS() can be removed\n    + JDK-8202790: DnD test DisposeFrameOnDragTest.java does not\n      clean up\n    + JDK-8202931: [macos] java/awt/Choice/ChoicePopupLocation/\n      /ChoicePopupLocation.java fails\n    + JDK-8207211: [TESTBUG] Remove excessive output from\n      CDS/AppCDS tests\n    + JDK-8207214: Broken links in JDK API serialized-form page\n    + JDK-8207855: Make applications/jcstress invoke tests in\n      batches\n    + JDK-8208243: vmTestbase/gc/lock/jni/jnilock002/\n      /TestDescription.java fails in jdk/hs nightly\n    + JDK-8208278: [mlvm] [TESTBUG] vm.mlvm.mixed.stress.java\n      .findDeadlock.INDIFY_Test Deadlocked threads are not always\n      detected\n    + JDK-8208623: [TESTBUG] runtime/LoadClass/LongBCP.java fails\n      in AUFS file system\n    + JDK-8208699: remove unneeded imports from runtime tests\n    + JDK-8208704: runtime/appcds/MultiReleaseJars.java timed out\n      often in hs-tier7 testing\n    + JDK-8208705: [TESTBUG] The -Xlog:cds,cds+hashtables vm option\n      is not always required for appcds tests\n    + JDK-8209549: remove VMPropsExt from TEST.ROOT\n    + JDK-8209595: MonitorVmStartTerminate.java timed out\n    + JDK-8209946: [TESTBUG] CDS tests should use '@run driver'\n    + JDK-8211438: [Testbug] runtime/XCheckJniJsig/XCheckJSig.java\n      looks for libjsig in wrong location\n    + JDK-8211978: Move  testlibrary/jdk/testlibrary/\n      /SimpleSSLContext.java and testkeys to network testlibrary\n    + JDK-8213622: Windows VS2013 build failure - ''snprintf':\n      identifier not found'\n    + JDK-8213926: WB_EnqueueInitializerForCompilation requests\n      compilation for NULL\n    + JDK-8213927: G1 ignores AlwaysPreTouch when\n      UseTransparentHugePages is enabled\n    + JDK-8214908: add ctw tests for jdk.jfr and jdk.management.jfr\n      modules\n    + JDK-8214915: CtwRunner misses export for jdk.internal.access\n    + JDK-8216408: XMLStreamWriter setDefaultNamespace(null) throws\n      NullPointerException\n    + JDK-8217475: Unexpected StackOverflowError in 'process\n      reaper' thread\n    + JDK-8218754: JDK-8068225 regression in JDIBreakpointTest\n    + JDK-8219475: javap man page needs to be updated\n    + JDK-8219585: [TESTBUG] sun/management/jmxremote/bootstrap/\n      /JMXInterfaceBindingTest.java passes trivially when it\n      shouldn't\n    + JDK-8219612: [TESTBUG] compiler.codecache.stress.Helper\n      .TestCaseImpl can't be defined in different runtime package as\n      its nest host\n    + JDK-8225471: Test utility  jdk.test.lib.util.FileUtils\n      .areAllMountPointsAccessible needs to tolerate duplicates\n    + JDK-8226706: (se) Reduce the number of outer loop iterations\n      on Windows in java/nio/channels/Selector/RacyDeregister.java\n    + JDK-8226905: unproblem list applications/ctw/modules/* tests\n      on windows\n    + JDK-8226910: make it possible to use jtreg's -match via\n      run-test framework\n    + JDK-8227438: [TESTLIB] Determine if file exists by\n      Files.exists in function FileUtils.deleteFileIfExistsWithRetry\n    + JDK-8231585: java/lang/management/ThreadMXBean/\n      /MaxDepthForThreadInfoTest.java fails with\n      java.lang.NullPointerException\n    + JDK-8232839: JDI AfterThreadDeathTest.java failed due to\n      'FAILED: Did not get expected IllegalThreadStateException on a\n      StepRequest.enable()'\n    + JDK-8233453: MLVM deoptimize stress test timed out\n    + JDK-8234309: LFGarbageCollectedTest.java fails with parse\n      Exception\n    + JDK-8237222: [macos] java/awt/Focus/UnaccessibleChoice/\n      /AccessibleChoiceTest.java fails\n    + JDK-8237777: 'Dumping core ...' is shown despite claiming\n      that '# No core dump will be written.'\n    + JDK-8237834: com/sun/jndi/ldap/LdapDnsProviderTest.java\n      failing with LDAP response read timeout\n    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel\n    + JDK-8239801: [macos] java/awt/Focus/UnaccessibleChoice/\n      /AccessibleChoiceTest.java fails\n    + JDK-8244679: JVM/TI GetCurrentContendedMonitor/contmon001\n      failed due to '(IsSameObject#3) unexpected monitor object:\n      0x000000562336DBA8'\n    + JDK-8246222: Rename javac test T6395981.java to be more\n      informative\n    + JDK-8247818: GCC 10 warning stringop-overflow with symbol code\n    + JDK-8249087: Always initialize _body[0..1] in Symbol\n      constructor\n    + JDK-8251349: Add TestCaseImpl to\n      OverloadCompileQueueTest.java's build dependencies\n    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/\n      /btree010.java fails with ClassNotFoundException:\n      nsk.sysdict.share.BTree0LLRLRLRRLR\n    + JDK-8253543: sanity/client/SwingSet/src/\n      /ButtonDemoScreenshotTest.java failed with 'AssertionError:\n      All pixels are not black'\n    + JDK-8253739: java/awt/image/MultiResolutionImage/\n      /MultiResolutionImageObserverTest.java fails\n    + JDK-8253820: Save test images and dumps with timestamps from\n      client sanity suite\n    + JDK-8255277: randomDelay in DrainDeadlockT and\n      LoggingDeadlock do not randomly delay\n    + JDK-8255546: Missing coverage for\n      javax.smartcardio.CardPermission and ResponseAPDU\n    + JDK-8255743: Relax SIGFPE match in in\n      runtime/ErrorHandling/SecondaryErrorTest.java\n    + JDK-8257505: nsk/share/test/StressOptions stressTime is\n      scaled in getter but not when printed\n    + JDK-8259801: Enable XML Signature secure validation mode by\n      default\n    + JDK-8264135: UnsafeGetStableArrayElement should account for\n      different JIT implementation details\n    + JDK-8265349: vmTestbase/../stress/compiler/deoptimize/\n      /Test.java fails with OOME due to CodeCache exhaustion.\n    + JDK-8269025: jsig/Testjsig.java doesn't check exit code\n    + JDK-8269077: TestSystemGC uses 'require vm.gc.G1' for large\n      pages subtest\n    + JDK-8271094: runtime/duplAttributes/DuplAttributesTest.java\n      doesn't check exit code\n    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java\n      doesn't check exit code\n    + JDK-8271828: mark hotspot runtime/classFileParserBug tests\n      which ignore external VM flags\n    + JDK-8271829: mark hotspot runtime/Throwable tests which\n      ignore external VM flags\n    + JDK-8271890: mark hotspot runtime/Dictionary tests which\n      ignore external VM flags\n    + JDK-8272291: mark hotspot runtime/logging tests which ignore\n      external VM flags\n    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't\n      check exit codes\n    + JDK-8272551: mark hotspot runtime/modules tests which ignore\n      external VM flags\n    + JDK-8272552: mark hotspot runtime/cds tests which ignore\n      external VM flags\n    + JDK-8273803: Zero: Handle 'zero' variant in\n      CommandLineOptionTest.java\n    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java\n      fails in Windows 11\n    + JDK-8274621: NullPointerException because listenAddress[0] is\n      null\n    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails\n      with ZGC\n    + JDK-8280007: Enable Neoverse N1 optimizations for Arm\n      Neoverse V1 \u0026 N2\n    + JDK-8281149: (fs) java/nio/file/FileStore/Basic.java  fails\n      with java.lang.RuntimeException: values differ by more than\n      1GB\n    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/\n      /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java\n      from problemlist.\n    + JDK-8281717: Cover logout method for several LoginModule\n    + JDK-8282665: [REDO] ByteBufferTest.java: replace endless\n      recursion with RuntimeException in void ck(double x, double y)\n    + JDK-8284090: com/sun/security/auth/module/AllPlatforms.java\n      fails to compile\n    + JDK-8285756: clean up use of bad arguments for `@clean` in\n      langtools tests\n    + JDK-8285785: CheckCleanerBound test fails with\n      PasswordCallback object is not released\n    + JDK-8285867: Convert applet manual tests\n      SelectionVisible.java to Frame and automate\n    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/\n      /CustomComboBoxFocusTest.java fails on mac aarch64\n    + JDK-8286969: Add a new test library API to execute kinit in\n      SecurityTools.java\n    + JDK-8287113: JFR: Periodic task thread uses period for method\n      sampling events\n    + JDK-8289511: Improve test coverage for XPath Axes: child\n    + JDK-8289764: gc/lock tests failed with 'OutOfMemoryError:\n      Java heap space: failed reallocation of scalar replaced\n      objects'\n    + JDK-8289948: Improve test coverage for XPath functions: Node\n      Set Functions\n    + JDK-8290399: [macos] Aqua LAF does not fire an action event\n      if combo box menu is displayed\n    + JDK-8290909: MemoryPoolMBean/isUsageThresholdExceeded tests\n      failed with 'isUsageThresholdExceeded() returned false, and is\n      still false, while threshold = MMMMMMM and used peak = NNNNNNN'\n    + JDK-8292182: [TESTLIB] Enhance JAXPPolicyManager to setup\n      required permissions for jtreg version 7 jar\n    + JDK-8292946: GC lock/jni/jnilock001 test failed\n      'assert(gch-\u003egc_cause() == GCCause::_scavenge_alot ||\n      !gch-\u003eincremental_collection_failed()) failed: Twice in a row'\n    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java failed\n      with 'RuntimeException: Retrieved backing PlatformLogger level\n      null is not the expected CONFIG'\n    + JDK-8294158: HTML formatting for PassFailJFrame instructions\n    + JDK-8294254: [macOS] javax/swing/plaf/aqua/\n      /CustomComboBoxFocusTest.java failure\n    + JDK-8294402: Add diagnostic logging to\n      VMProps.checkDockerSupport\n    + JDK-8294535: Add screen capture functionality to\n      PassFailJFrame\n    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails\n      intermittently on a VM\n    + JDK-8296384: [TESTBUG] sun/security/provider/SecureRandom/\n      /AbstractDrbg/SpecTest.java intermittently timeout\n    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java\n      failed: ExceptionInInitializerError: target class not found\n    + JDK-8300269: The selected item in an editable JComboBox with\n      titled border is not visible in Aqua LAF\n    + JDK-8300727: java/awt/List/ListGarbageCollectionTest/\n      /AwtListGarbageCollectionTest.java failed with 'List wasn't\n      garbage collected'\n    + JDK-8301310: The SendRawSysexMessage test may cause a JVM\n      crash\n    + JDK-8301377: adjust timeout for JLI\n      GetObjectSizeIntrinsicsTest.java subtest again\n    + JDK-8301846: Invalid TargetDataLine after screen lock when\n      using JFileChooser or COM library\n    + JDK-8302017: Allocate BadPaddingException only if it will be\n      thrown\n    + JDK-8302109: Trivial fixes to btree tests\n    + JDK-8302149: Speed up\n      compiler/jsr292/methodHandleExceptions/TestAMEnotNPE.java\n    + JDK-8302607: increase timeout for\n      ContinuousCallSiteTargetChange.java\n    + JDK-8304074: [JMX] Add an approximation of total bytes\n      allocated on the Java heap by the JVM\n    + JDK-8304314: StackWalkTest.java fails after CODETOOLS-7903373\n    + JDK-8304725: AsyncGetCallTrace can cause SIGBUS on M1\n    + JDK-8305502: adjust timeouts in three more M\u0026M tests\n    + JDK-8305505: NPE in javazic compiler\n    + JDK-8305972: Update XML Security for Java to 3.0.2\n    + JDK-8306072: Open source several AWT MouseInfo related tests\n    + JDK-8306076: Open source AWT misc tests\n    + JDK-8306409: Open source AWT KeyBoardFocusManger,\n      LightWeightComponent related tests\n    + JDK-8306640: Open source several AWT TextArea related tests\n    + JDK-8306652: Open source AWT MenuItem related tests\n    + JDK-8306681: Open source more AWT DnD related tests\n    + JDK-8306683: Open source several clipboard and color AWT tests\n    + JDK-8306752: Open source several container and component AWT\n      tests\n    + JDK-8306753: Open source several container AWT tests\n    + JDK-8306755: Open source few Swing JComponent and\n      AbstractButton tests\n    + JDK-8306812: Open source several AWT Miscellaneous tests\n    + JDK-8306871: Open source more AWT Drag \u0026 Drop tests\n    + JDK-8306996: Open source Swing MenuItem related tests\n    + JDK-8307123: Fix deprecation warnings in DPrinter\n    + JDK-8307130: Open source few Swing JMenu tests\n    + JDK-8307299: Move more DnD tests to open\n    + JDK-8307311: Timeouts on one macOS 12.6.1 host of two Swing\n      JTableHeader tests\n    + JDK-8307381: Open Source JFrame, JIF related Swing Tests\n    + JDK-8307683: Loop Predication should not hoist range checks\n      with trap on success projection by negating their condition\n    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC\n      while allocating\n    + JDK-8308116: jdk.test.lib.compiler.InMemoryJavaCompiler\n      .compile does not close files\n    + JDK-8308223: failure handler missed jcmd.vm.info command\n    + JDK-8308232: nsk/jdb tests don't pass -verbose flag to the\n      debuggee\n    + JDK-8308245: Add -proc:full to describe current default\n      annotation processing policy\n    + JDK-8308336: Test java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java failed:\n      java.net.BindException: Address already in use\n    + JDK-8309104: [JVMCI] compiler/unsafe/\n      /UnsafeGetStableArrayElement test asserts wrong values with\n      Graal\n    + JDK-8309119: [17u/11u] Redo JDK-8297951: C2: Create skeleton\n      predicates for all If nodes in loop predication\n    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/\n      /agentthr001/TestDescription.java crashing due to empty while\n      loop\n    + JDK-8309778: java/nio/file/Files/CopyAndMove.java fails when\n      using second test directory\n    + JDK-8309870: Using -proc:full should be considered requesting\n      explicit annotation processing\n    + JDK-8310106: sun.security.ssl.SSLHandshake\n      .getHandshakeProducer() incorrectly checks handshakeConsumers\n    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/\n      /bug6889007.java fails\n    + JDK-8310551: vmTestbase/nsk/jdb/interrupt/interrupt001/\n      /interrupt001.java timed out due to missing prompt\n    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java\n      timed out\n    + JDK-8311081: KeytoolReaderP12Test.java fail on localized\n      Windows platform\n    + JDK-8311511: Improve description of NativeLibrary JFR event\n    + JDK-8311585: Add JRadioButtonMenuItem to bug8031573.java\n    + JDK-8313081: MonitoringSupport_lock should be unconditionally\n      initialized after 8304074\n    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in\n      makefiles\n    + JDK-8313164: src/java.desktop/windows/native/libawt/windows/\n      /awt_Robot.cpp GetRGBPixels adjust releasing of resources\n    + JDK-8313252: Java_sun_awt_windows_ThemeReader_paintBackground\n      release resources in early returns\n    + JDK-8313643: Update HarfBuzz to 8.2.2\n    + JDK-8313816: Accessing jmethodID might lead to spurious\n      crashes\n    + JDK-8314144: gc/g1/ihop/TestIHOPStatic.java fails due to\n      extra concurrent mark with -Xcomp\n    + JDK-8314164: java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java fails intermittently\n      in timeout\n    + JDK-8314883:\n      Java_java_util_prefs_FileSystemPreferences_lockFile0 write\n      result errno in missing case\n    + JDK-8315034: File.mkdirs() occasionally fails to create\n      folders on Windows shared folder\n    + JDK-8315042: NPE in PKCS7.parseOldSignedData\n    + JDK-8315415: OutputAnalyzer.shouldMatchByLine() fails in some\n      cases\n    + JDK-8315499: build using devkit on Linux ppc64le RHEL puts\n      path to devkit into libsplashscreen\n    + JDK-8315594: Open source few headless Swing misc tests\n    + JDK-8315600: Open source few more headless Swing misc tests\n    + JDK-8315602: Open source swing security manager test\n    + JDK-8315606: Open source few swing text/html tests\n    + JDK-8315611: Open source swing text/html and tree test\n    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should\n      run with -Xbatch\n    + JDK-8315731: Open source several Swing Text related tests\n    + JDK-8315761: Open source few swing JList and JMenuBar tests\n    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/\n      /bug4654927.java: component must be showing on the screen to\n      determine its location\n    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use\n      createTestJvm\n    + JDK-8316028: Update FreeType to 2.13.2\n    + JDK-8316030: Update Libpng to 1.6.40\n    + JDK-8316106: Open source few swing JInternalFrame and\n      JMenuBar tests\n    + JDK-8316461: Fix: make test outputs TEST SUCCESS after\n      unsuccessful exit\n    + JDK-8316947: Write a test to check textArea triggers\n      MouseEntered/MouseExited events properly\n    + JDK-8317307: test/jdk/com/sun/jndi/ldap/\n      /LdapPoolTimeoutTest.java fails with ConnectException:\n      Connection timed out: no further information\n    + JDK-8317327: Remove JT_JAVA dead code in jib-profiles.js\n    + JDK-8318154: Improve stability of WheelModifier.java test\n    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/\n      /BootClassPathTest.sh fails on Japanese Windows\n    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails\n      with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1\n    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java\n    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni\n      tests\n    + JDK-8318608: Enable parallelism in\n      vmTestbase/nsk/stress/threads tests\n    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with\n      'transport error 202: bind failed: Address already in use'\n    + JDK-8318889: C2: add bailout after assert Bad graph detected\n      in build_loop_late\n    + JDK-8318951: Additional negative value check in JPEG decoding\n    + JDK-8318955: Add ReleaseIntArrayElements in\n      Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to\n      early return\n    + JDK-8318971: Better Error Handling for Jar Tool When\n      Processing Non-existent Files\n    + JDK-8318983: Fix comment typo in PKCS12Passwd.java\n    + JDK-8319124: Update XML Security for Java to 3.0.3\n    + JDK-8319456: jdk/jfr/event/gc/collection/\n      /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker\n      Initiated GC' not in the valid causes\n    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh\n    + JDK-8320001: javac crashes while adding type annotations to\n      the return type of a constructor\n    + JDK-8320208: Update Public Suffix List to b5bf572\n    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks\n      wrong, missed optimization opportunity\n    + JDK-8320597: RSA signature verification fails on signed data\n      that does not encode params correctly\n    + JDK-8320798: Console read line with zero out should zero out\n      underlying buffer\n    + JDK-8320884: Bump update version for OpenJDK: jdk-11.0.23\n    + JDK-8320937: support latest VS2022 MSC_VER in\n      abstract_vm_version.cpp\n    + JDK-8321151: JDK-8294427 breaks Windows L\u0026F on all older\n      Windows versions\n    + JDK-8321215: Incorrect x86 instruction encoding for VSIB\n      addressing mode\n    + JDK-8321408: Add Certainly roots R1 and E1\n    + JDK-8321480: ISO 4217 Amendment 176 Update\n    + JDK-8322178: Error. can't find jdk.testlibrary\n      .SimpleSSLContext in test directory or libraries\n    + JDK-8322417: Console read line with zero out should zero out\n      when throwing exception\n    + JDK-8322725: (tz) Update Timezone Data to 2023d\n    + JDK-8322750: Test 'api/java_awt/interactive/\n      /SystemTrayTests.html' failed because A blue ball icon is\n      added outside of the system tray\n    + JDK-8322752: [11u] GetStackTraceAndRetransformTest.java is\n      failing assert\n    + JDK-8322772: Clean up code after JDK-8322417\n    + JDK-8323008: filter out harmful -std* flags added by autoconf\n      from CXX\n    + JDK-8323243: JNI invocation of an abstract instance method\n      corrupts the stack\n    + JDK-8323515: Create test alias 'all' for all test roots\n    + JDK-8323640: [TESTBUG]testMemoryFailCount in jdk/internal/\n      /platform/docker/TestDockerMemoryMetrics.java always fail\n      because OOM killed\n    + JDK-8324184: Windows VS2010 build failed with 'error C2275:\n      'int64_t''\n    + JDK-8324307: [11u] hotspot fails to build with GCC 12 and\n      newer (non-static data member initializers)\n    + JDK-8324347: Enable 'maybe-uninitialized' warning for\n      FreeType 2.13.1\n    + JDK-8324659: GHA: Generic jtreg errors are not reported\n    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/\n      /AKISerialNumber.java is failing\n    + JDK-8325150: (tz) Update Timezone Data to 2024a\n    + JDK-8326109: GCC 13 reports maybe-uninitialized warnings for\n      jni.cpp with dtrace enabled\n    + JDK-8326503: [11u] java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java fail because of\n      package org.junit.jupiter.api does not exist\n    + JDK-8327391: Add SipHash attribution file\n    + JDK-8329837: [11u] Remove designator\n      DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.23\n\n- Removed the possibility to use the system timezone-java (bsc#1213470)\n\n","status":"published","published":"2024-06-18T08:34:19Z","modified":"2026-02-04T03:20:05.046246Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1499-1","title":"Security update for java-17-openjdk","description":"This update for java-17-openjdk fixes the following issues:\n\n- CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979)\n- CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS lookup (JDK-8315708,bsc#1222987)\n- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (JDK-8322122,bsc#1222983)  \n- CVE-2024-21094: Fixed unauthorized data modification due to C2 compilation failure with 'Exceeded _node_regs array' (JDK-8317507,JDK-8325348,bsc#1222986)\n\nOther fixes:\n- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)\n  * Security fixes\n    + JDK-8318340: Improve RSA key implementations\n  * Other changes\n    + JDK-6928542: Chinese characters in RTF are not decoded\n    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/\n      /bug4517214.java fails on MacOS\n    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the\n      combobox popup does not appear.\n    + JDK-7167356: (javac) investigate failing tests in\n      JavacParserTest\n    + JDK-8054022: HttpURLConnection timeouts with Expect:\n      100-Continue and no chunking\n    + JDK-8054572: [macosx] JComboBox paints the border incorrectly\n    + JDK-8169475: WheelModifier.java fails by timeout\n    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`\n      accesses `int InetAddress.preferIPv6Address` as a boolean\n    + JDK-8209595: MonitorVmStartTerminate.java timed out\n    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to\n      plain java tests\n    + JDK-8261404: Class.getReflectionFactory() is not thread-safe\n    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from\n    + JDK-8263256: Test java/net/Inet6Address/serialize/\n      /Inet6AddressSerializationTest.java fails due to dynamic\n      reconfigurations of network interface during test\n    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java\n      failed with connection timeout\n    + JDK-8271118: C2: StressGCM should have higher priority than\n      frequency-based policy\n    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse\n      contains info on final result\n    + JDK-8272811: Document the effects of building with\n      _GNU_SOURCE in os_posix.hpp\n    + JDK-8272853: improve `JavadocTester.runTests`\n    + JDK-8273454: C2: Transform (-a)*(-b) into a*b\n    + JDK-8274060: C2: Incorrect computation after JDK-8273454\n    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java\n      fails in Windows 11\n    + JDK-8274621: NullPointerException because listenAddress[0] is\n      null\n    + JDK-8274632: Possible pointer overflow in PretouchTask chunk\n      claiming\n    + JDK-8274634: Use String.equals instead of String.compareTo in\n      java.desktop\n    + JDK-8276125: RunThese24H.java SIGSEGV in\n      JfrThreadGroup::thread_group_id\n    + JDK-8278028: [test-library] Warnings cleanup of the test\n      library\n    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for\n      localhost IP addresses\n    + JDK-8278363: Create extented container test groups\n    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in\n      IPv6 only Windows env\n    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/\n      /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from\n      problemlist.\n    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp\n    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc\n    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect\n      JRadioButton value change\n    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4\n    + JDK-8283994: Make Xerces DatatypeException stackless\n    + JDK-8286312: Stop mixing signed and unsigned types in bit\n      operations\n    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/\n      /CustomComboBoxFocusTest.java fails on mac aarch64\n    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java\n      failed with 'Expected two batches of Active Setting events'\n    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only\n      a partially disabled state\n    + JDK-8288846: misc tests fail 'assert(ms \u003c 1000) failed:\n      Un-interruptable sleep, short time use only'\n    + JDK-8289764: gc/lock tests failed with 'OutOfMemoryError:\n      Java heap space: failed reallocation of scalar replaced\n      objects'\n    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent\n    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/\n      /capability/CM03/cm03t001/TestDescription.java on linux-all\n    + JDK-8290399: [macos] Aqua LAF does not fire an action event\n      if combo box menu is displayed\n    + JDK-8292458: Atomic operations on scoped enums don't build\n      with clang\n    + JDK-8292946: GC lock/jni/jnilock001 test failed\n      'assert(gch-\u003egc_cause() == GCCause::_scavenge_alot ||\n      !gch-\u003eincremental_collection_failed()) failed: Twice in a row'\n    + JDK-8293117: Add atomic bitset functions\n    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64\n      atomics\n    + JDK-8294158: HTML formatting for PassFailJFrame instructions\n    + JDK-8294254: [macOS] javax/swing/plaf/aqua/\n      /CustomComboBoxFocusTest.java failure\n    + JDK-8294535: Add screen capture functionality to\n      PassFailJFrame\n    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests\n    + JDK-8295124: Atomic::add to pointer type may return wrong\n      value\n    + JDK-8295274: HelidonAppTest.java fails\n      'assert(event-\u003eshould_commit()) failed: invariant' from\n      compiled frame'\n    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts\n    + JDK-8297968: Crash in PrintOptoAssembly\n    + JDK-8298087: XML Schema Validation reports an required\n      attribute twice via ErrorHandler\n    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java\n      failed: ExceptionInInitializerError: target class not found\n    + JDK-8300269: The selected item in an editable JComboBox with\n      titled border is not visible in Aqua LAF\n    + JDK-8301306: java/net/httpclient/* fail with -Xcomp\n    + JDK-8301310: The SendRawSysexMessage test may cause a JVM\n      crash\n    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing\n      after JDK-8301306\n    + JDK-8301846: Invalid TargetDataLine after screen lock when\n      using JFileChooser or COM library\n    + JDK-8302017: Allocate BadPaddingException only if it will be\n      thrown\n    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/\n      /TestAMEnotNPE.java\n    + JDK-8303605: Memory leaks in Metaspace gtests\n    + JDK-8304074: [JMX] Add an approximation of total bytes\n      allocated on the Java heap by the JVM\n    + JDK-8304696: Duplicate class names in dynamicArchive tests\n      can lead to test failure\n    + JDK-8305356: Fix ignored bad CompileCommands in tests\n    + JDK-8305900: Use loopback IP addresses in security policy\n      files of httpclient tests\n    + JDK-8305906: HttpClient may use incorrect key when finding\n      pooled HTTP/2 connection for IPv6 address\n    + JDK-8305962: update jcstress to 0.16\n    + JDK-8305972: Update XML Security for Java to 3.0.2\n    + JDK-8306014: Update javax.net.ssl TLS tests to use\n      SSLContextTemplate or SSLEngineTemplate\n    + JDK-8306408: Fix the format of several tables in building.md\n    + JDK-8307185: pkcs11 native libraries make JNI calls into java\n      code while holding GC lock\n    + JDK-8307926: Support byte-sized atomic bitset operations\n    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of\n      PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'\n    + JDK-8307990: jspawnhelper must close its writing side of a\n      pipe before reading from it\n    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC\n      while allocating\n    + JDK-8308245: Add -proc:full to describe current default\n      annotation processing policy\n    + JDK-8308336: Test java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java failed:\n      java.net.BindException: Address already in use\n    + JDK-8309302: java/net/Socket/Timeouts.java fails with\n      AssertionError on test temporal post condition\n    + JDK-8309305: sun/security/ssl/SSLSocketImpl/\n      /BlockedAsyncClose.java fails with jtreg test timeout\n    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/\n      /agentthr001/TestDescription.java crashing due to empty while\n      loop\n    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect\n      announcements of JRadioButton\n    + JDK-8309870: Using -proc:full should be considered requesting\n      explicit annotation processing\n    + JDK-8310106: sun.security.ssl.SSLHandshake\n      .getHandshakeProducer() incorrectly checks handshakeConsumers\n    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/\n      /bug6889007.java fails\n    + JDK-8310380: Handle problems in core-related tests on macOS\n      when codesign tool does not work\n    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is\n      spuriously passing\n    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java\n      timed out\n    + JDK-8310838: Correct range notations in MethodTypeDesc\n      specification\n    + JDK-8310844: [AArch64] C1 compilation fails because monitor\n      offset in OSR buffer is too large for immediate\n    + JDK-8310923: Refactor Currency tests to use JUnit\n    + JDK-8311081: KeytoolReaderP12Test.java fail on localized\n      Windows platform\n    + JDK-8311160: [macOS, Accessibility] VoiceOver: No\n      announcements on JRadioButtonMenuItem and JCheckBoxMenuItem\n    + JDK-8311581: Remove obsolete code and comments in TestLVT.java\n    + JDK-8311645: Memory leak in jspawnhelper spawnChild after\n      JDK-8307990\n    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for\n      ShenandoahGC\n    + JDK-8312428: PKCS11 tests fail with NSS 3.91\n    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with\n      'can't seal package nu.xom'\n    + JDK-8313081: MonitoringSupport_lock should be unconditionally\n      initialized after 8304074\n    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in\n      makefiles\n    + JDK-8313206: PKCS11 tests silently skip execution\n    + JDK-8313575: Refactor PKCS11Test tests\n    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/\n      /TestFloatingDecimal should use RandomFactory\n    + JDK-8313643: Update HarfBuzz to 8.2.2\n    + JDK-8313816: Accessing jmethodID might lead to spurious\n      crashes\n    + JDK-8314164: java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java fails intermittently\n      in timeout\n    + JDK-8314220: Configurable InlineCacheBuffer size\n    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM\n      flags\n    + JDK-8315034: File.mkdirs() occasionally fails to create\n      folders on Windows shared folder\n    + JDK-8315042: NPE in PKCS7.parseOldSignedData\n    + JDK-8315594: Open source few headless Swing misc tests\n    + JDK-8315600: Open source few more headless Swing misc tests\n    + JDK-8315602: Open source swing security manager test\n    + JDK-8315611: Open source swing text/html and tree test\n    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should\n      run with -Xbatch\n    + JDK-8315731: Open source several Swing Text related tests\n    + JDK-8315761: Open source few swing JList and JMenuBar tests\n    + JDK-8315920: C2: 'control input must dominate current\n      control' assert failure\n    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/\n      /bug4654927.java: component must be showing on the screen to\n      determine its location\n    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use\n      createTestJvm\n    + JDK-8316028: Update FreeType to 2.13.2\n    + JDK-8316030: Update Libpng to 1.6.40\n    + JDK-8316106: Open source few swing JInternalFrame and\n      JMenuBar tests\n    + JDK-8316304: (fs) Add support for BasicFileAttributes\n      .creationTime() for Linux\n    + JDK-8316392: compiler/interpreter/\n      /TestVerifyStackAfterDeopt.java failed with SIGBUS in\n      PcDescContainer::find_pc_desc_internal\n    + JDK-8316414: C2: large byte array clone triggers 'failed:\n      malformed control flow' assertion failure on linux-x86\n    + JDK-8316415: Parallelize\n      sun/security/rsa/SignedObjectChain.java subtests\n    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java\n      get OOM killed with Parallel GC\n    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/\n      /CheckOrigin.java as vm.flagless\n    + JDK-8316679: C2 SuperWord: wrong result, load should not be\n      moved before store if not comparable\n    + JDK-8316693: Simplify at-requires checkDockerSupport()\n    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full\n      GC need to cleanup old OopMapCache entries\n    + JDK-8316947: Write a test to check textArea triggers\n      MouseEntered/MouseExited events properly\n    + JDK-8317039: Enable specifying the JDK used to run jtreg\n    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/\n      /ClientJSSEServerJSSE.java on Linux ppc64le\n    + JDK-8317307: test/jdk/com/sun/jndi/ldap/\n      /LdapPoolTimeoutTest.java fails with ConnectException:\n      Connection timed out: no further information\n    + JDK-8317603: Improve exception messages thrown by\n      sun.nio.ch.Net native methods (win)\n    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard\n      freezes the application in macOS 14 Sonoma\n    + JDK-8317807: JAVA_FLAGS removed from jtreg running in\n      JDK-8317039\n    + JDK-8317960: [17u] Excessive CPU usage on\n      AbstractQueuedSynchronized.isEnqueued\n    + JDK-8318154: Improve stability of WheelModifier.java test\n    + JDK-8318183: C2: VM may crash after hitting node limit\n    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/\n      /BootClassPathTest.sh fails on Japanese Windows\n    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails\n      with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1\n    + JDK-8318490: Increase timeout for JDK tests that are close to\n      the limit when run with libgraal\n    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java\n    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni\n      tests\n    + JDK-8318608: Enable parallelism in\n      vmTestbase/nsk/stress/threads tests\n    + JDK-8318689: jtreg is confused when folder name is the same\n      as the test name\n    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with\n      'transport error 202: bind failed: Address already in use'\n    + JDK-8318951: Additional negative value check in JPEG decoding\n    + JDK-8318955: Add ReleaseIntArrayElements in\n      Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to\n      early return\n    + JDK-8318957: Enhance agentlib:jdwp help output by info about\n      allow option\n    + JDK-8318961: increase javacserver connection timeout values\n      and max retry attempts\n    + JDK-8318971: Better Error Handling for Jar Tool When\n      Processing Non-existent Files\n    + JDK-8318983: Fix comment typo in PKCS12Passwd.java\n    + JDK-8319124: Update XML Security for Java to 3.0.3\n    + JDK-8319213: Compatibility.java reads both stdout and stderr\n      of JdkUtils\n    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is\n      null and interface not visible from class loader\n    + JDK-8319456: jdk/jfr/event/gc/collection/\n      /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker\n      Initiated GC' not in the valid causes\n    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh\n    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21\n    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks\n    + JDK-8320001: javac crashes while adding type annotations to\n      the return type of a constructor\n    + JDK-8320168: handle setsocktopt return values\n    + JDK-8320208: Update Public Suffix List to b5bf572\n    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases\n    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks\n      wrong, missed optimization opportunity\n    + JDK-8320597: RSA signature verification fails on signed data\n      that does not encode params correctly\n    + JDK-8320798: Console read line with zero out should zero out\n      underlying buffer\n    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11\n    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs\n    + JDK-8320937: support latest VS2022 MSC_VER in\n      abstract_vm_version.cpp\n    + JDK-8321151: JDK-8294427 breaks Windows L\u0026F on all older\n      Windows versions\n    + JDK-8321215: Incorrect x86 instruction encoding for VSIB\n      addressing mode\n    + JDK-8321408: Add Certainly roots R1 and E1\n    + JDK-8321480: ISO 4217 Amendment 176 Update\n    + JDK-8321599: Data loss in AVX3 Base64 decoding\n    + JDK-8321815: Shenandoah: gc state should be synchronized to\n      java threads only once per safepoint\n    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java\n      timeout on linux-riscv64 platform\n    + JDK-8322098: os::Linux::print_system_memory_info enhance the\n      THP output with\n      /sys/kernel/mm/transparent_hugepage/hpage_pmd_size\n    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces\n    + JDK-8322417: Console read line with zero out should zero out\n      when throwing exception\n    + JDK-8322583: RISC-V: Enable fast class initialization checks\n    + JDK-8322725: (tz) Update Timezone Data to 2023d\n    + JDK-8322750: Test 'api/java_awt/interactive/\n      /SystemTrayTests.html' failed because A blue ball icon is\n      added outside of the system tray\n    + JDK-8322772: Clean up code after JDK-8322417\n    + JDK-8322783: prioritize /etc/os-release over\n      /etc/SuSE-release in hs_err/info output\n    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests\n    + JDK-8323008: filter out harmful -std* flags added by autoconf\n      from CXX\n    + JDK-8323021: Shenandoah: Encountered reference count always\n      attributed to first worker thread\n    + JDK-8323086: Shenandoah: Heap could be corrupted by oom\n      during evacuation\n    + JDK-8323243: JNI invocation of an abstract instance method\n      corrupts the stack\n    + JDK-8323331: fix typo hpage_pdm_size\n    + JDK-8323428: Shenandoah: Unused memory in regions compacted\n      during a full GC should be mangled\n    + JDK-8323515: Create test alias 'all' for all test roots\n    + JDK-8323637: Capture hotspot replay files in GHA\n    + JDK-8323640: [TESTBUG]testMemoryFailCount in\n      jdk/internal/platform/docker/TestDockerMemoryMetrics.java\n      always fail because OOM killed\n    + JDK-8323806: [17u] VS2017 build fails with warning after\n      8293117.\n    + JDK-8324184: Windows VS2010 build failed with 'error C2275:\n      'int64_t''\n    + JDK-8324280: RISC-V: Incorrect implementation in\n      VM_Version::parse_satp_mode\n    + JDK-8324347: Enable 'maybe-uninitialized' warning for\n      FreeType 2.13.1\n    + JDK-8324514: ClassLoaderData::print_on should print address\n      of class loader\n    + JDK-8324647: Invalid test group of lib-test after JDK-8323515\n    + JDK-8324659: GHA: Generic jtreg errors are not reported\n    + JDK-8324937: GHA: Avoid multiple test suites per job\n    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/\n      /AKISerialNumber.java is failing\n    + JDK-8325150: (tz) Update Timezone Data to 2024a\n    + JDK-8325585: Remove no longer necessary calls to\n      set/unset-in-asgct flag in JDK 17\n    + JDK-8326000: Remove obsolete comments for class\n      sun.security.ssl.SunJSSE\n    + JDK-8327036: [macosx-aarch64] SIGBUS in\n      MarkActivationClosure::do_code_blob reached from\n      Unsafe_CopySwapMemory0\n    + JDK-8327391: Add SipHash attribution file\n    + JDK-8329836: [17u] Remove designator\n      DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11\n\n- Removed the possibility to use the system timezone-java (bsc#1213470).\n","status":"published","published":"2024-05-06T07:44:57Z","modified":"2026-02-04T03:43:03.995001Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1499-2","title":"Security update for java-17-openjdk","description":"This update for java-17-openjdk fixes the following issues:\n\n- CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979)\n- CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS lookup (JDK-8315708,bsc#1222987)\n- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (JDK-8322122,bsc#1222983)  \n- CVE-2024-21094: Fixed unauthorized data modification due to C2 compilation failure with 'Exceeded _node_regs array' (JDK-8317507,JDK-8325348,bsc#1222986)\n\nOther fixes:\n- Update to upstream tag jdk-17.0.11+9 (April 2024 CPU)\n  * Security fixes\n    + JDK-8318340: Improve RSA key implementations\n  * Other changes\n    + JDK-6928542: Chinese characters in RTF are not decoded\n    + JDK-7132796: [macosx] closed/javax/swing/JComboBox/4517214/\n      /bug4517214.java fails on MacOS\n    + JDK-7148092: [macosx] When Alt+down arrow key is pressed, the\n      combobox popup does not appear.\n    + JDK-7167356: (javac) investigate failing tests in\n      JavacParserTest\n    + JDK-8054022: HttpURLConnection timeouts with Expect:\n      100-Continue and no chunking\n    + JDK-8054572: [macosx] JComboBox paints the border incorrectly\n    + JDK-8169475: WheelModifier.java fails by timeout\n    + JDK-8205076: [17u] Inet6AddressImpl.c: `lookupIfLocalHost`\n      accesses `int InetAddress.preferIPv6Address` as a boolean\n    + JDK-8209595: MonitorVmStartTerminate.java timed out\n    + JDK-8210410: Refactor java.util.Currency:i18n shell tests to\n      plain java tests\n    + JDK-8261404: Class.getReflectionFactory() is not thread-safe\n    + JDK-8261837: SIGSEGV in ciVirtualCallTypeData::translate_from\n    + JDK-8263256: Test java/net/Inet6Address/serialize/\n      /Inet6AddressSerializationTest.java fails due to dynamic\n      reconfigurations of network interface during test\n    + JDK-8269258: java/net/httpclient/ManyRequestsLegacy.java\n      failed with connection timeout\n    + JDK-8271118: C2: StressGCM should have higher priority than\n      frequency-based policy\n    + JDK-8271616: oddPart in MutableBigInteger::mutableModInverse\n      contains info on final result\n    + JDK-8272811: Document the effects of building with\n      _GNU_SOURCE in os_posix.hpp\n    + JDK-8272853: improve `JavadocTester.runTests`\n    + JDK-8273454: C2: Transform (-a)*(-b) into a*b\n    + JDK-8274060: C2: Incorrect computation after JDK-8273454\n    + JDK-8274122: java/io/File/createTempFile/SpecialTempFile.java\n      fails in Windows 11\n    + JDK-8274621: NullPointerException because listenAddress[0] is\n      null\n    + JDK-8274632: Possible pointer overflow in PretouchTask chunk\n      claiming\n    + JDK-8274634: Use String.equals instead of String.compareTo in\n      java.desktop\n    + JDK-8276125: RunThese24H.java SIGSEGV in\n      JfrThreadGroup::thread_group_id\n    + JDK-8278028: [test-library] Warnings cleanup of the test\n      library\n    + JDK-8278312: Update SimpleSSLContext keystore to use SANs for\n      localhost IP addresses\n    + JDK-8278363: Create extented container test groups\n    + JDK-8280241: (aio) AsynchronousSocketChannel init fails in\n      IPv6 only Windows env\n    + JDK-8281377: Remove vmTestbase/nsk/monitoring/ThreadMXBean/\n      /ThreadInfo/Deadlock/JavaDeadlock001/TestDescription.java from\n      problemlist.\n    + JDK-8281543: Remove unused code/headerfile dtraceAttacher.hpp\n    + JDK-8281585: Remove unused imports under test/lib and jtreg/gc\n    + JDK-8283400: [macos] a11y : Screen magnifier does not reflect\n      JRadioButton value change\n    + JDK-8283626: AArch64: Set relocInfo::offset_unit to 4\n    + JDK-8283994: Make Xerces DatatypeException stackless\n    + JDK-8286312: Stop mixing signed and unsigned types in bit\n      operations\n    + JDK-8286846: test/jdk/javax/swing/plaf/aqua/\n      /CustomComboBoxFocusTest.java fails on mac aarch64\n    + JDK-8287832: jdk/jfr/event/runtime/TestActiveSettingEvent.java\n      failed with 'Expected two batches of Active Setting events'\n    + JDK-8288663: JFR: Disabling the JfrThreadSampler commits only\n      a partially disabled state\n    + JDK-8288846: misc tests fail 'assert(ms \u003c 1000) failed:\n      Un-interruptable sleep, short time use only'\n    + JDK-8289764: gc/lock tests failed with 'OutOfMemoryError:\n      Java heap space: failed reallocation of scalar replaced\n      objects'\n    + JDK-8290041: ModuleDescriptor.hashCode is inconsistent\n    + JDK-8290203: ProblemList vmTestbase/nsk/jvmti/scenarios/\n      /capability/CM03/cm03t001/TestDescription.java on linux-all\n    + JDK-8290399: [macos] Aqua LAF does not fire an action event\n      if combo box menu is displayed\n    + JDK-8292458: Atomic operations on scoped enums don't build\n      with clang\n    + JDK-8292946: GC lock/jni/jnilock001 test failed\n      'assert(gch-\u003egc_cause() == GCCause::_scavenge_alot ||\n      !gch-\u003eincremental_collection_failed()) failed: Twice in a row'\n    + JDK-8293117: Add atomic bitset functions\n    + JDK-8293547: Add relaxed add_and_fetch for macos aarch64\n      atomics\n    + JDK-8294158: HTML formatting for PassFailJFrame instructions\n    + JDK-8294254: [macOS] javax/swing/plaf/aqua/\n      /CustomComboBoxFocusTest.java failure\n    + JDK-8294535: Add screen capture functionality to\n      PassFailJFrame\n    + JDK-8295068: SSLEngine throws NPE parsing CertificateRequests\n    + JDK-8295124: Atomic::add to pointer type may return wrong\n      value\n    + JDK-8295274: HelidonAppTest.java fails\n      'assert(event-\u003eshould_commit()) failed: invariant' from\n      compiled frame'\n    + JDK-8296631: NSS tests failing on OL9 linux-aarch64 hosts\n    + JDK-8297968: Crash in PrintOptoAssembly\n    + JDK-8298087: XML Schema Validation reports an required\n      attribute twice via ErrorHandler\n    + JDK-8299494: Test vmTestbase/nsk/stress/except/except011.java\n      failed: ExceptionInInitializerError: target class not found\n    + JDK-8300269: The selected item in an editable JComboBox with\n      titled border is not visible in Aqua LAF\n    + JDK-8301306: java/net/httpclient/* fail with -Xcomp\n    + JDK-8301310: The SendRawSysexMessage test may cause a JVM\n      crash\n    + JDK-8301787: java/net/httpclient/SpecialHeadersTest failing\n      after JDK-8301306\n    + JDK-8301846: Invalid TargetDataLine after screen lock when\n      using JFileChooser or COM library\n    + JDK-8302017: Allocate BadPaddingException only if it will be\n      thrown\n    + JDK-8302149: Speed up compiler/jsr292/methodHandleExceptions/\n      /TestAMEnotNPE.java\n    + JDK-8303605: Memory leaks in Metaspace gtests\n    + JDK-8304074: [JMX] Add an approximation of total bytes\n      allocated on the Java heap by the JVM\n    + JDK-8304696: Duplicate class names in dynamicArchive tests\n      can lead to test failure\n    + JDK-8305356: Fix ignored bad CompileCommands in tests\n    + JDK-8305900: Use loopback IP addresses in security policy\n      files of httpclient tests\n    + JDK-8305906: HttpClient may use incorrect key when finding\n      pooled HTTP/2 connection for IPv6 address\n    + JDK-8305962: update jcstress to 0.16\n    + JDK-8305972: Update XML Security for Java to 3.0.2\n    + JDK-8306014: Update javax.net.ssl TLS tests to use\n      SSLContextTemplate or SSLEngineTemplate\n    + JDK-8306408: Fix the format of several tables in building.md\n    + JDK-8307185: pkcs11 native libraries make JNI calls into java\n      code while holding GC lock\n    + JDK-8307926: Support byte-sized atomic bitset operations\n    + JDK-8307955: Prefer to PTRACE_GETREGSET instead of\n      PTRACE_GETREGS in method 'ps_proc.c::process_get_lwp_regs'\n    + JDK-8307990: jspawnhelper must close its writing side of a\n      pipe before reading from it\n    + JDK-8308043: Deadlock in TestCSLocker.java due to blocking GC\n      while allocating\n    + JDK-8308245: Add -proc:full to describe current default\n      annotation processing policy\n    + JDK-8308336: Test java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java failed:\n      java.net.BindException: Address already in use\n    + JDK-8309302: java/net/Socket/Timeouts.java fails with\n      AssertionError on test temporal post condition\n    + JDK-8309305: sun/security/ssl/SSLSocketImpl/\n      /BlockedAsyncClose.java fails with jtreg test timeout\n    + JDK-8309462: [AIX] vmTestbase/nsk/jvmti/RunAgentThread/\n      /agentthr001/TestDescription.java crashing due to empty while\n      loop\n    + JDK-8309733: [macOS, Accessibility] VoiceOver: Incorrect\n      announcements of JRadioButton\n    + JDK-8309870: Using -proc:full should be considered requesting\n      explicit annotation processing\n    + JDK-8310106: sun.security.ssl.SSLHandshake\n      .getHandshakeProducer() incorrectly checks handshakeConsumers\n    + JDK-8310238: [test bug] javax/swing/JTableHeader/6889007/\n      /bug6889007.java fails\n    + JDK-8310380: Handle problems in core-related tests on macOS\n      when codesign tool does not work\n    + JDK-8310631: test/jdk/sun/nio/cs/TestCharsetMapping.java is\n      spuriously passing\n    + JDK-8310807: java/nio/channels/DatagramChannel/Connect.java\n      timed out\n    + JDK-8310838: Correct range notations in MethodTypeDesc\n      specification\n    + JDK-8310844: [AArch64] C1 compilation fails because monitor\n      offset in OSR buffer is too large for immediate\n    + JDK-8310923: Refactor Currency tests to use JUnit\n    + JDK-8311081: KeytoolReaderP12Test.java fail on localized\n      Windows platform\n    + JDK-8311160: [macOS, Accessibility] VoiceOver: No\n      announcements on JRadioButtonMenuItem and JCheckBoxMenuItem\n    + JDK-8311581: Remove obsolete code and comments in TestLVT.java\n    + JDK-8311645: Memory leak in jspawnhelper spawnChild after\n      JDK-8307990\n    + JDK-8311986: Disable runtime/os/TestTracePageSizes.java for\n      ShenandoahGC\n    + JDK-8312428: PKCS11 tests fail with NSS 3.91\n    + JDK-8312434: SPECjvm2008/xml.transform with CDS fails with\n      'can't seal package nu.xom'\n    + JDK-8313081: MonitoringSupport_lock should be unconditionally\n      initialized after 8304074\n    + JDK-8313082: Enable CreateCoredumpOnCrash for testing in\n      makefiles\n    + JDK-8313206: PKCS11 tests silently skip execution\n    + JDK-8313575: Refactor PKCS11Test tests\n    + JDK-8313621: test/jdk/jdk/internal/math/FloatingDecimal/\n      /TestFloatingDecimal should use RandomFactory\n    + JDK-8313643: Update HarfBuzz to 8.2.2\n    + JDK-8313816: Accessing jmethodID might lead to spurious\n      crashes\n    + JDK-8314164: java/net/HttpURLConnection/\n      /HttpURLConnectionExpectContinueTest.java fails intermittently\n      in timeout\n    + JDK-8314220: Configurable InlineCacheBuffer size\n    + JDK-8314830: runtime/ErrorHandling/ tests ignore external VM\n      flags\n    + JDK-8315034: File.mkdirs() occasionally fails to create\n      folders on Windows shared folder\n    + JDK-8315042: NPE in PKCS7.parseOldSignedData\n    + JDK-8315594: Open source few headless Swing misc tests\n    + JDK-8315600: Open source few more headless Swing misc tests\n    + JDK-8315602: Open source swing security manager test\n    + JDK-8315611: Open source swing text/html and tree test\n    + JDK-8315680: java/lang/ref/ReachabilityFenceTest.java should\n      run with -Xbatch\n    + JDK-8315731: Open source several Swing Text related tests\n    + JDK-8315761: Open source few swing JList and JMenuBar tests\n    + JDK-8315920: C2: 'control input must dominate current\n      control' assert failure\n    + JDK-8315986: [macos14] javax/swing/JMenuItem/4654927/\n      /bug4654927.java: component must be showing on the screen to\n      determine its location\n    + JDK-8316001: GC: Make TestArrayAllocatorMallocLimit use\n      createTestJvm\n    + JDK-8316028: Update FreeType to 2.13.2\n    + JDK-8316030: Update Libpng to 1.6.40\n    + JDK-8316106: Open source few swing JInternalFrame and\n      JMenuBar tests\n    + JDK-8316304: (fs) Add support for BasicFileAttributes\n      .creationTime() for Linux\n    + JDK-8316392: compiler/interpreter/\n      /TestVerifyStackAfterDeopt.java failed with SIGBUS in\n      PcDescContainer::find_pc_desc_internal\n    + JDK-8316414: C2: large byte array clone triggers 'failed:\n      malformed control flow' assertion failure on linux-x86\n    + JDK-8316415: Parallelize\n      sun/security/rsa/SignedObjectChain.java subtests\n    + JDK-8316418: containers/docker/TestMemoryWithCgroupV1.java\n      get OOM killed with Parallel GC\n    + JDK-8316445: Mark com/sun/management/HotSpotDiagnosticMXBean/\n      /CheckOrigin.java as vm.flagless\n    + JDK-8316679: C2 SuperWord: wrong result, load should not be\n      moved before store if not comparable\n    + JDK-8316693: Simplify at-requires checkDockerSupport()\n    + JDK-8316929: Shenandoah: Shenandoah degenerated GC and full\n      GC need to cleanup old OopMapCache entries\n    + JDK-8316947: Write a test to check textArea triggers\n      MouseEntered/MouseExited events properly\n    + JDK-8317039: Enable specifying the JDK used to run jtreg\n    + JDK-8317144: Exclude sun/security/pkcs11/sslecc/\n      /ClientJSSEServerJSSE.java on Linux ppc64le\n    + JDK-8317307: test/jdk/com/sun/jndi/ldap/\n      /LdapPoolTimeoutTest.java fails with ConnectException:\n      Connection timed out: no further information\n    + JDK-8317603: Improve exception messages thrown by\n      sun.nio.ch.Net native methods (win)\n    + JDK-8317771: [macos14] Expand/collapse a JTree using keyboard\n      freezes the application in macOS 14 Sonoma\n    + JDK-8317807: JAVA_FLAGS removed from jtreg running in\n      JDK-8317039\n    + JDK-8317960: [17u] Excessive CPU usage on\n      AbstractQueuedSynchronized.isEnqueued\n    + JDK-8318154: Improve stability of WheelModifier.java test\n    + JDK-8318183: C2: VM may crash after hitting node limit\n    + JDK-8318410: jdk/java/lang/instrument/BootClassPath/\n      /BootClassPathTest.sh fails on Japanese Windows\n    + JDK-8318468: compiler/tiered/LevelTransitionTest.java fails\n      with -XX:CompileThreshold=100 -XX:TieredStopAtLevel=1\n    + JDK-8318490: Increase timeout for JDK tests that are close to\n      the limit when run with libgraal\n    + JDK-8318603: Parallelize sun/java2d/marlin/ClipShapeTest.java\n    + JDK-8318607: Enable parallelism in vmTestbase/nsk/stress/jni\n      tests\n    + JDK-8318608: Enable parallelism in\n      vmTestbase/nsk/stress/threads tests\n    + JDK-8318689: jtreg is confused when folder name is the same\n      as the test name\n    + JDK-8318736: com/sun/jdi/JdwpOnThrowTest.java failed with\n      'transport error 202: bind failed: Address already in use'\n    + JDK-8318951: Additional negative value check in JPEG decoding\n    + JDK-8318955: Add ReleaseIntArrayElements in\n      Java_sun_awt_X11_XlibWrapper_SetBitmapShape XlbWrapper.c to\n      early return\n    + JDK-8318957: Enhance agentlib:jdwp help output by info about\n      allow option\n    + JDK-8318961: increase javacserver connection timeout values\n      and max retry attempts\n    + JDK-8318971: Better Error Handling for Jar Tool When\n      Processing Non-existent Files\n    + JDK-8318983: Fix comment typo in PKCS12Passwd.java\n    + JDK-8319124: Update XML Security for Java to 3.0.3\n    + JDK-8319213: Compatibility.java reads both stdout and stderr\n      of JdkUtils\n    + JDK-8319436: Proxy.newProxyInstance throws NPE if loader is\n      null and interface not visible from class loader\n    + JDK-8319456: jdk/jfr/event/gc/collection/\n      /TestGCCauseWith[Serial|Parallel].java : GC cause 'GCLocker\n      Initiated GC' not in the valid causes\n    + JDK-8319668: Fixup of jar filename typo in BadFactoryTest.sh\n    + JDK-8319922: libCreationTimeHelper.so fails to link in JDK 21\n    + JDK-8319961: JvmtiEnvBase doesn't zero _ext_event_callbacks\n    + JDK-8320001: javac crashes while adding type annotations to\n      the return type of a constructor\n    + JDK-8320168: handle setsocktopt return values\n    + JDK-8320208: Update Public Suffix List to b5bf572\n    + JDK-8320300: Adjust hs_err output in malloc/mmap error cases\n    + JDK-8320363: ppc64 TypeEntries::type_unknown logic looks\n      wrong, missed optimization opportunity\n    + JDK-8320597: RSA signature verification fails on signed data\n      that does not encode params correctly\n    + JDK-8320798: Console read line with zero out should zero out\n      underlying buffer\n    + JDK-8320885: Bump update version for OpenJDK: jdk-17.0.11\n    + JDK-8320921: GHA: Parallelize hotspot_compiler test jobs\n    + JDK-8320937: support latest VS2022 MSC_VER in\n      abstract_vm_version.cpp\n    + JDK-8321151: JDK-8294427 breaks Windows L\u0026F on all older\n      Windows versions\n    + JDK-8321215: Incorrect x86 instruction encoding for VSIB\n      addressing mode\n    + JDK-8321408: Add Certainly roots R1 and E1\n    + JDK-8321480: ISO 4217 Amendment 176 Update\n    + JDK-8321599: Data loss in AVX3 Base64 decoding\n    + JDK-8321815: Shenandoah: gc state should be synchronized to\n      java threads only once per safepoint\n    + JDK-8321972: test runtime/Unsafe/InternalErrorTest.java\n      timeout on linux-riscv64 platform\n    + JDK-8322098: os::Linux::print_system_memory_info enhance the\n      THP output with\n      /sys/kernel/mm/transparent_hugepage/hpage_pmd_size\n    + JDK-8322321: Add man page doc for -XX:+VerifySharedSpaces\n    + JDK-8322417: Console read line with zero out should zero out\n      when throwing exception\n    + JDK-8322583: RISC-V: Enable fast class initialization checks\n    + JDK-8322725: (tz) Update Timezone Data to 2023d\n    + JDK-8322750: Test 'api/java_awt/interactive/\n      /SystemTrayTests.html' failed because A blue ball icon is\n      added outside of the system tray\n    + JDK-8322772: Clean up code after JDK-8322417\n    + JDK-8322783: prioritize /etc/os-release over\n      /etc/SuSE-release in hs_err/info output\n    + JDK-8322968: [17u] Amend Atomics gtest with 1-byte tests\n    + JDK-8323008: filter out harmful -std* flags added by autoconf\n      from CXX\n    + JDK-8323021: Shenandoah: Encountered reference count always\n      attributed to first worker thread\n    + JDK-8323086: Shenandoah: Heap could be corrupted by oom\n      during evacuation\n    + JDK-8323243: JNI invocation of an abstract instance method\n      corrupts the stack\n    + JDK-8323331: fix typo hpage_pdm_size\n    + JDK-8323428: Shenandoah: Unused memory in regions compacted\n      during a full GC should be mangled\n    + JDK-8323515: Create test alias 'all' for all test roots\n    + JDK-8323637: Capture hotspot replay files in GHA\n    + JDK-8323640: [TESTBUG]testMemoryFailCount in\n      jdk/internal/platform/docker/TestDockerMemoryMetrics.java\n      always fail because OOM killed\n    + JDK-8323806: [17u] VS2017 build fails with warning after\n      8293117.\n    + JDK-8324184: Windows VS2010 build failed with 'error C2275:\n      'int64_t''\n    + JDK-8324280: RISC-V: Incorrect implementation in\n      VM_Version::parse_satp_mode\n    + JDK-8324347: Enable 'maybe-uninitialized' warning for\n      FreeType 2.13.1\n    + JDK-8324514: ClassLoaderData::print_on should print address\n      of class loader\n    + JDK-8324647: Invalid test group of lib-test after JDK-8323515\n    + JDK-8324659: GHA: Generic jtreg errors are not reported\n    + JDK-8324937: GHA: Avoid multiple test suites per job\n    + JDK-8325096: Test java/security/cert/CertPathBuilder/akiExt/\n      /AKISerialNumber.java is failing\n    + JDK-8325150: (tz) Update Timezone Data to 2024a\n    + JDK-8325585: Remove no longer necessary calls to\n      set/unset-in-asgct flag in JDK 17\n    + JDK-8326000: Remove obsolete comments for class\n      sun.security.ssl.SunJSSE\n    + JDK-8327036: [macosx-aarch64] SIGBUS in\n      MarkActivationClosure::do_code_blob reached from\n      Unsafe_CopySwapMemory0\n    + JDK-8327391: Add SipHash attribution file\n    + JDK-8329836: [17u] Remove designator\n      DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.11\n\n- Removed the possibility to use the system timezone-java (bsc#1213470).\n","status":"published","published":"2024-06-18T11:05:03Z","modified":"2026-02-04T03:17:01.915008Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1845-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 8 Fix Pack 25 (bsc#1223470):\n\n- CVE-2023-38264: Fixed Object Request Broker (ORB) denial of service (bsc#1224164). \n- CVE-2024-21094: Fixed C2 compilation fails with 'Exceeded _node_regs array' (bsc#1222986). \n- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (bsc#1222983). \n- CVE-2024-21085: Fixed Pack200 excessive memory allocation (bsc#1222984).\n- CVE-2024-21011: Fixed Long Exception message leading to crash (bsc#1222979). \n- CVE-2024-21012: Fixed HTTP/2 client improper reverse DNS lookup (bsc#1222987). \n","status":"published","published":"2024-05-29T19:41:10Z","modified":"2025-05-02T04:35:11.554133Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1859-1","title":"Security update for java-1_8_0-ibm","description":"This update for java-1_8_0-ibm fixes the following issues:\n\nUpdate to Java 8.0 Service Refresh 8 Fix Pack 25 (bsc#1223470):\n\n- CVE-2023-38264: Fixed Object Request Broker (ORB) denial of service (bsc#1224164).\n- CVE-2024-21094: Fixed C2 compilation fails with 'Exceeded _node_regs array' (bsc#1222986).\n- CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (bsc#1222983).\n- CVE-2024-21085: Fixed Pack200 excessive memory allocation (bsc#1222984).\n- CVE-2024-21011: Fixed Long Exception message leading to crash (bsc#1222979).\n- CVE-2024-21012: Fixed HTTP/2 client improper reverse DNS lookup (bsc#1222987).\n","status":"published","published":"2024-05-30T12:14:53Z","modified":"2026-02-04T03:52:46.714248Z","updated_at":"2026-11-02T15:53:54.652421Z"}]},"sources_more":{"osv":3}}