Red Hat Security Advisory

RHSA-2024:0265

java-1.8.0-openjdk security and bug fix update

Released 2024-01-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.402.b06-2.el8, java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.402.b06-2.el8, java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-2.el8 +9
Red Hat CodeReady Linux Builder (v. 9) java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-2.el9, java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-2.el9, java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-2.el9 +7
Red Hat CodeReady Linux Builder EUS (v.8.8) java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.402.b06-2.el8, java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.402.b06-2.el8, java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-2.el8 +9
Red Hat CodeReady Linux Builder EUS (v.9.2) java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-2.el9, java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-2.el9, java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-2.el9 +7
Red Hat Enterprise Linux AppStream (v. 8) java-1.8.0-openjdk-1:1.8.0.402.b06-2.el8, java-1.8.0-openjdk-accessibility-1:1.8.0.402.b06-2.el8, java-1.8.0-openjdk-demo-1:1.8.0.402.b06-2.el8 +5
Red Hat Enterprise Linux AppStream (v. 9) java-1.8.0-openjdk-1:1.8.0.402.b06-2.el9, java-1.8.0-openjdk-demo-1:1.8.0.402.b06-2.el9, java-1.8.0-openjdk-devel-1:1.8.0.402.b06-2.el9 +4
Red Hat Enterprise Linux AppStream EUS (v.8.8) java-1.8.0-openjdk-1:1.8.0.402.b06-2.el8, java-1.8.0-openjdk-accessibility-1:1.8.0.402.b06-2.el8, java-1.8.0-openjdk-demo-1:1.8.0.402.b06-2.el8 +5
Red Hat Enterprise Linux AppStream EUS (v.9.2) java-1.8.0-openjdk-1:1.8.0.402.b06-2.el9, java-1.8.0-openjdk-demo-1:1.8.0.402.b06-2.el9, java-1.8.0-openjdk-devel-1:1.8.0.402.b06-2.el9 +4

Fixes 6 records

TI-2024-13745 CVE-2024-20952 · GHSA-343v-9ccv-7535

Improper access control in Oracle Java SE JDK and JRE

MEDIUM 42

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00918 Published 2024-01-16 Partial fix CWE-284

TI-2024-13711 CVE-2024-20918 · GHSA-45pc-2866-5hxx

Improper access control in Oracle Java SE JDK and JRE

MEDIUM 42

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00918 Published 2024-01-16 Partial fix CWE-284

TI-2024-13719 CVE-2024-20926 · GHSA-hjh6-9v4w-w32w

Improper access control in Oracle Java SE JDK and JRE

LOW 28

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01035 Published 2024-01-16 Partial fix CWE-284

TI-2024-13714 CVE-2024-20921 · GHSA-hxqj-hr64-7vf7

Incorrect default permissions in Oracle Java SE JDK and JRE

LOW 28

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00864 Published 2024-02-17 Partial fix CWE-276

TI-2024-13712 CVE-2024-20919 · GHSA-vgxv-38wx-r77w

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise…

LOW 28

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00799 Published 2024-02-17 Partial fix

TI-2024-13738 CVE-2024-20945 · GHSA-qj64-r5h2-w6f9

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise…

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00411 Published 2024-02-17 Partial fix