Red Hat Security Advisory

RHSA-2024:0266

java-11-openjdk security update

Released 2024-01-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) java-11-openjdk-demo-fastdebug-1:11.0.22.0.7-2.el8, java-11-openjdk-demo-slowdebug-1:11.0.22.0.7-2.el8, java-11-openjdk-devel-fastdebug-1:11.0.22.0.7-2.el8 +11
Red Hat CodeReady Linux Builder (v. 9) java-11-openjdk-demo-fastdebug-1:11.0.22.0.7-2.el9, java-11-openjdk-demo-slowdebug-1:11.0.22.0.7-2.el9, java-11-openjdk-devel-fastdebug-1:11.0.22.0.7-2.el9 +11
Red Hat CodeReady Linux Builder EUS (v.8.8) java-11-openjdk-demo-fastdebug-1:11.0.22.0.7-2.el8, java-11-openjdk-demo-slowdebug-1:11.0.22.0.7-2.el8, java-11-openjdk-devel-fastdebug-1:11.0.22.0.7-2.el8 +11
Red Hat CodeReady Linux Builder EUS (v.9.2) java-11-openjdk-demo-fastdebug-1:11.0.22.0.7-2.el9, java-11-openjdk-demo-slowdebug-1:11.0.22.0.7-2.el9, java-11-openjdk-devel-fastdebug-1:11.0.22.0.7-2.el9 +11
Red Hat Enterprise Linux AppStream (v. 8) java-11-openjdk-1:11.0.22.0.7-2.el8, java-11-openjdk-demo-1:11.0.22.0.7-2.el8, java-11-openjdk-devel-1:11.0.22.0.7-2.el8 +6
Red Hat Enterprise Linux AppStream (v. 9) java-11-openjdk-1:11.0.22.0.7-2.el9, java-11-openjdk-demo-1:11.0.22.0.7-2.el9, java-11-openjdk-devel-1:11.0.22.0.7-2.el9 +6
Red Hat Enterprise Linux AppStream EUS (v.8.8) java-11-openjdk-1:11.0.22.0.7-2.el8, java-11-openjdk-demo-1:11.0.22.0.7-2.el8, java-11-openjdk-devel-1:11.0.22.0.7-2.el8 +6
Red Hat Enterprise Linux AppStream EUS (v.9.2) java-11-openjdk-1:11.0.22.0.7-2.el9, java-11-openjdk-demo-1:11.0.22.0.7-2.el9, java-11-openjdk-devel-1:11.0.22.0.7-2.el9 +6

TI-2024-13745 CVE-2024-20952 · GHSA-343v-9ccv-7535

MEDIUM 42

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00918 Published 2024-01-16 Partial fix CWE-284

TI-2024-13711 CVE-2024-20918 · GHSA-45pc-2866-5hxx

MEDIUM 42

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00918 Published 2024-01-16 Partial fix CWE-284

TI-2024-13719 CVE-2024-20926 · GHSA-hjh6-9v4w-w32w

LOW 28

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01035 Published 2024-01-16 Partial fix CWE-284

TI-2024-13714 CVE-2024-20921 · GHSA-hxqj-hr64-7vf7

LOW 28

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00864 Published 2024-02-17 Partial fix CWE-276

TI-2024-13712 CVE-2024-20919 · GHSA-vgxv-38wx-r77w

LOW 28

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00799 Published 2024-02-17 Partial fix

TI-2024-13738 CVE-2024-20945 · GHSA-qj64-r5h2-w6f9

LOW 22

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00411 Published 2024-02-17 Partial fix