Hi Scott,

Based on the limited information available about these vulnerabilities, we don't think that LabKey Server is likely to be at risk. However, since we can't prove that it's not affected, we recommend that all installations plan to upgrade their Java installation according to their regular maintenance and upgrade schedules.

We regularly update our automated test systems with new third party software, including Java. We haven't done it yet in this particular case, but given the list of changes it seems extremely unlikely that there will be any regressions.

Thanks,
Josh