Red Hat Security Advisory

RHSA-2024:4564

java-11-openjdk security update

Released 2024-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) java-11-openjdk-1:11.0.24.0.8-1.el7_9, java-11-openjdk-devel-1:11.0.24.0.8-1.el7_9, java-11-openjdk-headless-1:11.0.24.0.8-1.el7_9
Red Hat Enterprise Linux Server Optional (v. 7 ELS) java-11-openjdk-demo-1:11.0.24.0.8-1.el7_9, java-11-openjdk-javadoc-1:11.0.24.0.8-1.el7_9, java-11-openjdk-javadoc-zip-1:11.0.24.0.8-1.el7_9 +3

TI-2024-13938 CVE-2024-21147 · GHSA-hw83-24q6-v392

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01127 Published 2024-07-16 Partial fix CWE-200

TI-2024-13931 CVE-2024-21140 · GHSA-7prq-r42m-wfcx

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.0094 Published 2024-07-16 Partial fix CWE-200

TI-2024-13936 CVE-2024-21145 · GHSA-4mqw-v4pq-hg97

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00856 Published 2024-07-16 Partial fix CWE-284

TI-2024-13935 CVE-2024-21144 · GHSA-w7m5-fr55-qch7

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01047 Published 2024-07-16 Partial fix

TI-2024-13929 CVE-2024-21138 · GHSA-4rqr-f9qq-h7w3

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01257 Published 2024-07-16 Partial fix

TI-2024-13922 CVE-2024-21131 · GHSA-v5pp-g8vf-3fxg

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0104 Published 2024-07-16 Partial fix