Red Hat Security Advisory

RHSA-2024:1822

java-11-openjdk security update

Released 2024-04-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) java-11-openjdk-demo-fastdebug-1:11.0.23.0.9-3.el8, java-11-openjdk-demo-slowdebug-1:11.0.23.0.9-3.el8, java-11-openjdk-devel-fastdebug-1:11.0.23.0.9-3.el8 +11
Red Hat CodeReady Linux Builder (v. 9) java-11-openjdk-demo-fastdebug-1:11.0.23.0.9-3.el9, java-11-openjdk-demo-slowdebug-1:11.0.23.0.9-3.el9, java-11-openjdk-devel-fastdebug-1:11.0.23.0.9-3.el9 +11
Red Hat CodeReady Linux Builder EUS (v.8.6) java-11-openjdk-demo-fastdebug-1:11.0.23.0.9-2.el8_6, java-11-openjdk-demo-slowdebug-1:11.0.23.0.9-2.el8_6, java-11-openjdk-devel-fastdebug-1:11.0.23.0.9-2.el8_6 +11
Red Hat CodeReady Linux Builder EUS (v.8.8) java-11-openjdk-demo-fastdebug-1:11.0.23.0.9-3.el8, java-11-openjdk-demo-slowdebug-1:11.0.23.0.9-3.el8, java-11-openjdk-devel-fastdebug-1:11.0.23.0.9-3.el8 +11
Red Hat CodeReady Linux Builder EUS (v.9.0) java-11-openjdk-demo-fastdebug-1:11.0.23.0.9-2.el9_0, java-11-openjdk-demo-slowdebug-1:11.0.23.0.9-2.el9_0, java-11-openjdk-devel-fastdebug-1:11.0.23.0.9-2.el9_0 +11
Red Hat CodeReady Linux Builder EUS (v.9.2) java-11-openjdk-demo-fastdebug-1:11.0.23.0.9-3.el9, java-11-openjdk-demo-slowdebug-1:11.0.23.0.9-3.el9, java-11-openjdk-devel-fastdebug-1:11.0.23.0.9-3.el9 +11
Red Hat Enterprise Linux AppStream (v. 8) java-11-openjdk-1:11.0.23.0.9-3.el8, java-11-openjdk-demo-1:11.0.23.0.9-3.el8, java-11-openjdk-devel-1:11.0.23.0.9-3.el8 +6
Red Hat Enterprise Linux AppStream (v. 9) java-11-openjdk-1:11.0.23.0.9-3.el9, java-11-openjdk-demo-1:11.0.23.0.9-3.el9, java-11-openjdk-devel-1:11.0.23.0.9-3.el9 +6
Red Hat Enterprise Linux AppStream AUS (v. 8.2) java-11-openjdk-1:11.0.23.0.9-2.el8_2, java-11-openjdk-demo-1:11.0.23.0.9-2.el8_2, java-11-openjdk-devel-1:11.0.23.0.9-2.el8_2 +6
Red Hat Enterprise Linux AppStream AUS (v.8.4) java-11-openjdk-1:11.0.23.0.9-2.el8_4, java-11-openjdk-demo-1:11.0.23.0.9-2.el8_4, java-11-openjdk-devel-1:11.0.23.0.9-2.el8_4 +6
Red Hat Enterprise Linux AppStream E4S (v. 8.2) java-11-openjdk-1:11.0.23.0.9-2.el8_2, java-11-openjdk-demo-1:11.0.23.0.9-2.el8_2, java-11-openjdk-devel-1:11.0.23.0.9-2.el8_2 +6
Red Hat Enterprise Linux AppStream E4S (v.8.4) java-11-openjdk-1:11.0.23.0.9-2.el8_4, java-11-openjdk-demo-1:11.0.23.0.9-2.el8_4, java-11-openjdk-devel-1:11.0.23.0.9-2.el8_4 +6
Red Hat Enterprise Linux AppStream EUS (v.8.6) java-11-openjdk-1:11.0.23.0.9-2.el8_6, java-11-openjdk-demo-1:11.0.23.0.9-2.el8_6, java-11-openjdk-devel-1:11.0.23.0.9-2.el8_6 +6
Red Hat Enterprise Linux AppStream EUS (v.8.8) java-11-openjdk-1:11.0.23.0.9-3.el8, java-11-openjdk-demo-1:11.0.23.0.9-3.el8, java-11-openjdk-devel-1:11.0.23.0.9-3.el8 +6
Red Hat Enterprise Linux AppStream EUS (v.9.0) java-11-openjdk-1:11.0.23.0.9-2.el9_0, java-11-openjdk-demo-1:11.0.23.0.9-2.el9_0, java-11-openjdk-devel-1:11.0.23.0.9-2.el9_0 +6
Red Hat Enterprise Linux AppStream EUS (v.9.2) java-11-openjdk-1:11.0.23.0.9-3.el9, java-11-openjdk-demo-1:11.0.23.0.9-3.el9, java-11-openjdk-devel-1:11.0.23.0.9-3.el9 +6
Red Hat Enterprise Linux AppStream TUS (v. 8.2) java-11-openjdk-1:11.0.23.0.9-2.el8_2, java-11-openjdk-demo-1:11.0.23.0.9-2.el8_2, java-11-openjdk-devel-1:11.0.23.0.9-2.el8_2 +6
Red Hat Enterprise Linux AppStream TUS (v.8.4) java-11-openjdk-1:11.0.23.0.9-2.el8_4, java-11-openjdk-demo-1:11.0.23.0.9-2.el8_4, java-11-openjdk-devel-1:11.0.23.0.9-2.el8_4 +6

Fixes 5 records

TI-2024-13877 CVE-2024-21085 · GHSA-273j-fjrx-gf2f

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01286 Published 2024-04-16 Partial fix

TI-2024-13860 CVE-2024-21068 · GHSA-q4c6-w389-xqq6

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.013 Published 2024-04-16 Partial fix

TI-2024-13803 CVE-2024-21011 · GHSA-7qqv-8pwc-x4xc

Resource allocation without limits in Oracle Java SE JDK and JRE

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01372 Published 2024-04-16 Partial fix CWE-770

TI-2024-13886 CVE-2024-21094 · GHSA-g3wm-f7gr-3fwh

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise…

LOW 19

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00752 Published 2024-04-16 Partial fix CWE-349

TI-2024-13804 CVE-2024-21012 · GHSA-ccmh-gwpx-35xj

Incorrect default permissions in Oracle Java SE JDK and JRE

LOW 19

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0091 Published 2024-04-16 Partial fix CWE-276