openjdk-11-demo: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Security)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Security). Supported versions that are affected are Java SE:7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult toexploit vulnerability allows unauthenticated attacker with network accessvia Kerberos to compromise Java SE, Java SE Embedded. Successful attacks ofthis vulnerability can result in unauthorized update, insert or deleteaccess to some of Java SE, Java SE Embedded accessible data. Note: Thisvulnerability applies to Java deployments, typically in clients runningsandboxed Java Web Start applications or sandboxed Java applets (in Java SE8), that load and run untrusted code (e.g., code that comes from theinternet) and rely on the Java sandbox for security. This vulnerability canalso be exploited by using APIs in the specified Component, e.g., through aweb service which supplies data to the APIs. CVSS 3.0 Base Score 3.7(Integrity impacts). CVSS Vector:(CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).

Where it's fixed