Linux · Security advisory · November 23, 2021

DSA-5012-1: openjdk-17 security update

DSA-5012-1, released November 23, 2021, fixes 1 CVE in openjdk-17 (version 17.0.1+12-1+deb11u2). None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0840
95th percentile

Fixed package versions

ProductReleaseFixed in
openjdk-17Debian 11.6 (bullseye)17.0.1+12-1+deb11u2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2021-35556 java-17-openjdk-demo-fastdebug: The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Develop... 6.8 0.0840 None reported
Showing 1 to 1 of 1 1