Name of the Vulnerable Software and Affected Versions java-1 8 0-openjdk versions prior to jdk8u275

Description The issue affects the StartTLS functionality, which was broken in previous versions. It also involves problems with private keys not being supported by chosen signature algorithms, PKCS11 connections being closed after certain operations, and crashes in specific functions. The estimated number of potentially affected devices is not provided.

Recommendations For java-1 8 0-openjdk versions prior to jdk8u275, update to version jdk8u275 or later to resolve the issues. As a temporary workaround, consider disabling the use of StartTLS functionality and restricting the use of private keys with unsupported signature algorithms until the update is applied. Avoid using the Cipher.doFinal function with NoPadding until the issue is resolved.