Executive Summary

Titleopenjdk-11 security update
NameDSA-4486First vendor Publication2019-07-21
VendorDebianLast vendor Modification2019-07-21
Severity (Vendor) N/ARevision1

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base ScoreN/AAttack RangeN/A
Cvss Impact ScoreN/AAttack ComplexityN/A
Cvss Expoit ScoreN/AAuthenticationN/A
Calculate full CVSS 2.0 Vectors scores


Several vulnerabilities have been discovered in the OpenJDK Java runtime, resulting in information disclosure, denial of service or bypass of sandbox restrictions. In addition the implementation of elliptic curve cryptography was modernised.

For the stable distribution (buster), these problems have been fixed in version 11.0.4+11-1~deb10u1.

We recommend that you upgrade your openjdk-11 packages.

For the detailed security status of openjdk-11 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/openjdk-11

Original Source

Url : http://www.debian.org/security/2019/dsa-4486

Alert History

If you want to see full details history, please login or register.
2019-07-21 21:18:37
  • First insertion