Red Hat Security Advisory

RHSA-2024:1817

java-1.8.0-openjdk security update

Released 2024-04-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) java-1.8.0-openjdk-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.412.b08-1.el7_9
Red Hat Enterprise Linux Client Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.412.b08-1.el7_9 +3
Red Hat Enterprise Linux ComputeNode Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.412.b08-1.el7_9 +3
Red Hat Enterprise Linux Server (v. 7) java-1.8.0-openjdk-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.412.b08-1.el7_9
Red Hat Enterprise Linux Server Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.412.b08-1.el7_9 +2
Red Hat Enterprise Linux Workstation (v. 7) java-1.8.0-openjdk-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.412.b08-1.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) java-1.8.0-openjdk-accessibility-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.412.b08-1.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.412.b08-1.el7_9 +2

TI-2024-13877 CVE-2024-21085 · GHSA-273j-fjrx-gf2f

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01286 Published 2024-04-16 Partial fix

TI-2024-13860 CVE-2024-21068 · GHSA-q4c6-w389-xqq6

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.013 Published 2024-04-16 Partial fix

TI-2024-13803 CVE-2024-21011 · GHSA-7qqv-8pwc-x4xc

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01372 Published 2024-04-16 Partial fix CWE-770

TI-2024-13886 CVE-2024-21094 · GHSA-g3wm-f7gr-3fwh

LOW 19

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00752 Published 2024-04-16 Partial fix CWE-349