Linux · Security advisory · February 1, 2024

DSA-5613-1: openjdk-17 security update

DSA-5613-1, released February 1, 2024, fixes 1 CVE in openjdk-17. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0092
60th percentile

Fixed package versions

ProductReleaseFixed in
openjdk-17Debian 11.6 (bullseye)17.0.10+7-1~deb11u1
openjdk-17Debian 12.15 (bookworm)17.0.10+7-1~deb12u1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-20918 openjdk-21: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java... 7.4 0.0092 None reported
Showing 1 to 1 of 1 1