I took this code and made a fork, adding only an improved build using Gradle. OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541) (CVE-2020-2756) - OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549) (CVE-2020-2757) - OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415) (CVE-2020-2773) - OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408) (CVE-2020-2781) - OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825) (CVE-2020-2800) - OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841) (CVE-2020-2803) - OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274) (CVE-2020-2805) - OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201) (CVE-2020-2830) Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. sudo dnf install make git gcc-10 java-11-openjdk-headless For this example, Ill use a Java benchmark I like from NASA: NAS Parallel Benchmarks (NPB3.0). Description The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1507 advisory. Synopsis The remote Red Hat host is missing one or more security updates. Linux : RPM Test: java-1.7.0-openjdk-devel is earlier than 0:1.7.0.25-2.3.10.3.0.1.el64 At least one of the objects listed below must exist on the system (Existence check) Linux : RPM Package java-1.7.0-openjdk-devel. Severity display preferences can be toggled in the settings dropdown. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Last worked in version 6u31 STEPS TO FOLLOW TO REPRODUCE THE PROBLEM : Download and install jdk-1.6.037 Download and install jre-7u9-linux-圆4.rpm EXPECTED VERSUS ACTUAL BEHAVIOR : EXPECTED - file jexec from new java version must replace old if they do same, of new must installed as jexec-v7 if its differents REPRODUCIBILITY : This bug can be.

The calculated severity for Plugins has been updated to use CVSS v3 by default.

Java 1.7.0 openjdk rpm