Anyway to update STATA 17 Azul Zulu jdk on linux?

[Geoff Rowland]

My install of STATA 17 is fully up to date, but the following security issues are being reported by my scanning software:
(all Azul Zulu JDK vulns)
CVE-2024-21147
CVE-2023-42950
CVE-2024-25062
CVE-2024-21234
CVE-2024-21145
CVE-2024-21140

/usr/local/stata17/utilities/java/linux-x64/zulu-jdk17.0.11/lib/jrt-fs.jar

Does anyone know if STATA 19 has the fixes for these (or which jdk it ships with)?

[Geoff Rowland]

update: replaced 17.0.11 with updated version from the Azul website - seems to still work.

[James Hassell (StataCorp)]

Geoff Rowland indicated you can update the OpenJDK distributed with Stata. Have a look at our FAQ for the specific update policy: https://www.stata.com/support/faqs/java/java-virtual-machine/

Regarding using a different version of OpenJDK, I recommend that you stick with the same major LTS version that was shipped with Stata, but instead get the most current release. To make Stata use the new version you'll need to tell Stata where to find it.

java set home "path to java home dir"