The context: I want to be sure that Java installed on our system is not affected by CVE-2022-21449.
java -version gives
openjdk version "11.0.7" 2020-04-14 LTS
OpenJDK Runtime Environment 18.9 (build 11.0.7+10-LTS)
OpenJDK 64-Bit Server VM 18.9 (build 11.0.7+10-LTS, mixed mode, sharing)
what meaning does "18.9" have? (java 11 is not listed as affected by CVE-2022-21449, java 18 on the other hand is).
"18.9" refers to the release date (year and month).
https://en.wikipedia.org/wiki/Java_version_history#Java_11 notes that Java 11 was released in September of 2018.