CVE-2008-5355
Fixed in a distro release EPSS 8%
The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to execute arbitrary code via DNS man-in-the-middle attacks.
Products: sun jdk, sun jre, sun sdk
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | openjdk-11-openj9 | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-dbg | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-default-jdk | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-default-jvm | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-doc | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-jmods | 0.59.0-r2 |
| Chainguard | openjdk-11-openj9-jre | 0.59.0-r2 |
| Chainguard | openjdk-17-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-doc | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-17-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-doc | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-21-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-25-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-jmods | 0.59.0-r1 |
| Chainguard | openjdk-26-openj9-jre | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9 | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-default-jdk | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-default-jvm | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-doc | 0.59.0-r1 |
| Chainguard | openjdk-8-openj9-jre | 0.59.0-r1 |