Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
Each line is one product that two or more sources describe differently. Same identifier means they both named it the same way; linked identifier means they named it differently and meet at a package URL or CPE both assert. This is recorded rather than resolved: a vendor saying "not affected" where an ecosystem says "affected" is a fact about the disclosure, and flattening it would hide the more useful half.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| red_hat_enterprise_linux_6:java-1.6.0-openjdk java-1.6.0-openjdk as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.6.0-openjdk | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.6.0-openjdk java-1.6.0-openjdk as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.6.0-openjdk | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.6.0-openjdk-demo java-1.6.0-openjdk-demo as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.6.0-openjdk-demo | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.6.0-openjdk-demo java-1.6.0-openjdk-demo as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.6.0-openjdk-demo | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.6.0-openjdk-devel java-1.6.0-openjdk-devel as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.6.0-openjdk-devel | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.6.0-openjdk-devel java-1.6.0-openjdk-devel as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.6.0-openjdk-devel | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.6.0-openjdk-javadoc java-1.6.0-openjdk-javadoc as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.6.0-openjdk-javadoc | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.6.0-openjdk-javadoc java-1.6.0-openjdk-javadoc as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.6.0-openjdk-javadoc | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.6.0-openjdk-src java-1.6.0-openjdk-src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.6.0-openjdk-src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.6.0-openjdk-src java-1.6.0-openjdk-src as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.6.0-openjdk-src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.6.0-openjdk.src java-1.6.0-openjdk.src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.6.0-openjdk.src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.6.0-openjdk.src java-1.6.0-openjdk.src as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.6.0-openjdk.src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.7.0-openjdk java-1.7.0-openjdk as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.7.0-openjdk | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.7.0-openjdk java-1.7.0-openjdk as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.7.0-openjdk | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.7.0-openjdk-accessibility java-1.7.0-openjdk-accessibility as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.7.0-openjdk-accessibility | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.7.0-openjdk-demo java-1.7.0-openjdk-demo as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.7.0-openjdk-demo | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.7.0-openjdk-demo java-1.7.0-openjdk-demo as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.7.0-openjdk-demo | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.7.0-openjdk-devel java-1.7.0-openjdk-devel as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.7.0-openjdk-devel | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.7.0-openjdk-devel java-1.7.0-openjdk-devel as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.7.0-openjdk-devel | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.7.0-openjdk-headless java-1.7.0-openjdk-headless as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.7.0-openjdk-headless | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.7.0-openjdk-javadoc java-1.7.0-openjdk-javadoc as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.7.0-openjdk-javadoc | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.7.0-openjdk-javadoc java-1.7.0-openjdk-javadoc as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.7.0-openjdk-javadoc | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.7.0-openjdk-src java-1.7.0-openjdk-src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.7.0-openjdk-src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.7.0-openjdk-src java-1.7.0-openjdk-src as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.7.0-openjdk-src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.7.0-openjdk.src java-1.7.0-openjdk.src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.7.0-openjdk.src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.7.0-openjdk.src java-1.7.0-openjdk.src as a component of Red Hat Enterprise Linux 7 | affected | no version stated vendor label: java-1.7.0-openjdk.src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk java-1.8.0-openjdk as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-debug java-1.8.0-openjdk-debug as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-debug | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-demo java-1.8.0-openjdk-demo as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-demo | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-demo-debug java-1.8.0-openjdk-demo-debug as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-demo-debug | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-devel java-1.8.0-openjdk-devel as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-devel | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-devel-debug java-1.8.0-openjdk-devel-debug as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-devel-debug | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-headless java-1.8.0-openjdk-headless as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-headless | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-headless-debug java-1.8.0-openjdk-headless-debug as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-headless-debug | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-javadoc java-1.8.0-openjdk-javadoc as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-javadoc | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-javadoc-debug java-1.8.0-openjdk-javadoc-debug as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-javadoc-debug | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-src java-1.8.0-openjdk-src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-src | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk-src-debug java-1.8.0-openjdk-src-debug as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk-src-debug | out of support fix in another branch | csaf_redhat | |
| red_hat_enterprise_linux_6:java-1.8.0-openjdk.src java-1.8.0-openjdk.src as a component of Red Hat Enterprise Linux 6 | affected | no version stated vendor label: java-1.8.0-openjdk.src | out of support fix in another branch | csaf_redhat | |
| OPENJDK ELS 11.0.30 | fixed | no version stated | vendor fix | csaf_redhat | |
| Red Hat Build of OpenJDK 17.0.18 | fixed | no version stated | vendor fix | csaf_redhat | |
| Red Hat Build of OpenJDK 21.0.10 | fixed | no version stated | vendor fix | csaf_redhat | |
| Red Hat Build of OpenJDK 8u482 | fixed | no version stated | vendor fix | csaf_redhat | |
| Temurin Build of OpenJDK 25.0.2 | fixed | no version stated | vendor fix | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-ibm java-1.8.0-ibm as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-ibm | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-ibm-demo java-1.8.0-ibm-demo as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-ibm-demo | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-ibm-devel java-1.8.0-ibm-devel as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-ibm-devel | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-ibm-headless java-1.8.0-ibm-headless as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-ibm-headless | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-ibm-jdbc java-1.8.0-ibm-jdbc as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-ibm-jdbc | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-ibm-plugin java-1.8.0-ibm-plugin as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-ibm-plugin | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-ibm-src java-1.8.0-ibm-src as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-ibm-src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-ibm-webstart java-1.8.0-ibm-webstart as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-ibm-webstart | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.8.0-openjdk java-1.8.0-openjdk as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-openjdk | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-openjdk java-1.8.0-openjdk as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-openjdk | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:java-1.8.0-openjdk java-1.8.0-openjdk as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-openjdk | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.8.0-openjdk-accessibility java-1.8.0-openjdk-accessibility as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-openjdk-accessibility | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-openjdk-accessibility java-1.8.0-openjdk-accessibility as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-openjdk-accessibility | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:java-1.8.0-openjdk-accessibility-debug java-1.8.0-openjdk-accessibility-debug as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-openjdk-accessibility-debug | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-openjdk-accessibility-fastdebug java-1.8.0-openjdk-accessibility-fastdebug as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-openjdk-accessibility-fastdebug | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:java-1.8.0-openjdk-accessibility-slowdebug java-1.8.0-openjdk-accessibility-slowdebug as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: java-1.8.0-openjdk-accessibility-slowdebug | not applicable | csaf_redhat |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.