Red Hat Security Advisory

RHSA-2024:4567

java-11-openjdk security update

Released 2024-07-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.8.8) java-11-openjdk-demo-fastdebug-1:11.0.24.0.8-3.el8, java-11-openjdk-demo-slowdebug-1:11.0.24.0.8-3.el8, java-11-openjdk-devel-fastdebug-1:11.0.24.0.8-3.el8 +11
Red Hat CodeReady Linux Builder EUS (v.9.2) java-11-openjdk-demo-fastdebug-1:11.0.24.0.8-2.el9, java-11-openjdk-demo-slowdebug-1:11.0.24.0.8-2.el9, java-11-openjdk-devel-fastdebug-1:11.0.24.0.8-2.el9 +11
Red Hat Enterprise Linux AppStream (v. 8) java-11-openjdk-1:11.0.24.0.8-3.el8, java-11-openjdk-demo-1:11.0.24.0.8-3.el8, java-11-openjdk-devel-1:11.0.24.0.8-3.el8 +6
Red Hat Enterprise Linux AppStream (v. 9) java-11-openjdk-1:11.0.24.0.8-2.el9, java-11-openjdk-demo-1:11.0.24.0.8-2.el9, java-11-openjdk-devel-1:11.0.24.0.8-2.el9 +6
Red Hat Enterprise Linux AppStream AUS (v. 8.2) java-11-openjdk-1:11.0.24.0.8-1.el8_2, java-11-openjdk-demo-1:11.0.24.0.8-1.el8_2, java-11-openjdk-devel-1:11.0.24.0.8-1.el8_2 +6
Red Hat Enterprise Linux AppStream AUS (v.8.4) java-11-openjdk-1:11.0.24.0.8-1.el8_4, java-11-openjdk-demo-1:11.0.24.0.8-1.el8_4, java-11-openjdk-devel-1:11.0.24.0.8-1.el8_4 +6
Red Hat Enterprise Linux AppStream AUS (v.8.6) java-11-openjdk-1:11.0.24.0.8-1.el8_6, java-11-openjdk-demo-1:11.0.24.0.8-1.el8_6, java-11-openjdk-devel-1:11.0.24.0.8-1.el8_6 +6
Red Hat Enterprise Linux AppStream E4S (v.8.4) java-11-openjdk-1:11.0.24.0.8-1.el8_4, java-11-openjdk-demo-1:11.0.24.0.8-1.el8_4, java-11-openjdk-devel-1:11.0.24.0.8-1.el8_4 +6
Red Hat Enterprise Linux AppStream E4S (v.8.6) java-11-openjdk-1:11.0.24.0.8-1.el8_6, java-11-openjdk-demo-1:11.0.24.0.8-1.el8_6, java-11-openjdk-devel-1:11.0.24.0.8-1.el8_6 +6
Red Hat Enterprise Linux AppStream E4S (v.9.0) java-11-openjdk-1:11.0.24.0.8-1.el9_0, java-11-openjdk-demo-1:11.0.24.0.8-1.el9_0, java-11-openjdk-devel-1:11.0.24.0.8-1.el9_0 +6
Red Hat Enterprise Linux AppStream EUS (v.8.8) java-11-openjdk-1:11.0.24.0.8-3.el8, java-11-openjdk-demo-1:11.0.24.0.8-3.el8, java-11-openjdk-devel-1:11.0.24.0.8-3.el8 +6
Red Hat Enterprise Linux AppStream EUS (v.9.2) java-11-openjdk-1:11.0.24.0.8-2.el9, java-11-openjdk-demo-1:11.0.24.0.8-2.el9, java-11-openjdk-devel-1:11.0.24.0.8-2.el9 +6
Red Hat Enterprise Linux AppStream TUS (v.8.4) java-11-openjdk-1:11.0.24.0.8-1.el8_4, java-11-openjdk-demo-1:11.0.24.0.8-1.el8_4, java-11-openjdk-devel-1:11.0.24.0.8-1.el8_4 +6
Red Hat Enterprise Linux AppStream TUS (v.8.6) java-11-openjdk-1:11.0.24.0.8-1.el8_6, java-11-openjdk-demo-1:11.0.24.0.8-1.el8_6, java-11-openjdk-devel-1:11.0.24.0.8-1.el8_6 +6
Red Hat Enterprise Linux CRB (v. 8) java-11-openjdk-demo-fastdebug-1:11.0.24.0.8-3.el8, java-11-openjdk-demo-slowdebug-1:11.0.24.0.8-3.el8, java-11-openjdk-devel-fastdebug-1:11.0.24.0.8-3.el8 +11
Red Hat Enterprise Linux CRB (v. 9) java-11-openjdk-demo-fastdebug-1:11.0.24.0.8-2.el9, java-11-openjdk-demo-slowdebug-1:11.0.24.0.8-2.el9, java-11-openjdk-devel-fastdebug-1:11.0.24.0.8-2.el9 +11

Fixes 6 records

TI-2024-13938 CVE-2024-21147 · GHSA-hw83-24q6-v392

Information disclosure in Oracle Java SE JDK and JRE

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01127 Published 2024-07-16 Partial fix CWE-200

TI-2024-13931 CVE-2024-21140 · GHSA-7prq-r42m-wfcx

Information disclosure in Oracle Java SE JDK and JRE

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.0094 Published 2024-07-16 Partial fix CWE-200

TI-2024-13936 CVE-2024-21145 · GHSA-4mqw-v4pq-hg97

Improper access control in Oracle Java SE JDK and JRE

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00856 Published 2024-07-16 Partial fix CWE-284

TI-2024-13935 CVE-2024-21144 · GHSA-w7m5-fr55-qch7

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01047 Published 2024-07-16 Partial fix

TI-2024-13929 CVE-2024-21138 · GHSA-4rqr-f9qq-h7w3

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01257 Published 2024-07-16 Partial fix

TI-2024-13922 CVE-2024-21131 · GHSA-v5pp-g8vf-3fxg

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise…

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0104 Published 2024-07-16 Partial fix