Red Hat Security Advisory

RHSA-2024:4573

java-21-openjdk security update

Released 2024-07-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) java-21-openjdk-1:21.0.4.0.7-1.el8, java-21-openjdk-demo-1:21.0.4.0.7-1.el8, java-21-openjdk-devel-1:21.0.4.0.7-1.el8 +6
Red Hat Enterprise Linux AppStream (v. 9) java-21-openjdk-1:21.0.4.0.7-1.el9, java-21-openjdk-demo-1:21.0.4.0.7-1.el9, java-21-openjdk-devel-1:21.0.4.0.7-1.el9 +6
Red Hat Enterprise Linux CRB (v. 8) java-21-openjdk-demo-fastdebug-1:21.0.4.0.7-1.el8, java-21-openjdk-demo-slowdebug-1:21.0.4.0.7-1.el8, java-21-openjdk-devel-fastdebug-1:21.0.4.0.7-1.el8 +11
Red Hat Enterprise Linux CRB (v. 9) java-21-openjdk-demo-fastdebug-1:21.0.4.0.7-1.el9, java-21-openjdk-demo-slowdebug-1:21.0.4.0.7-1.el9, java-21-openjdk-devel-fastdebug-1:21.0.4.0.7-1.el9 +11

TI-2024-13938 CVE-2024-21147 · GHSA-hw83-24q6-v392

LOW 37

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01127 Published 2024-07-16 Partial fix CWE-200

TI-2024-13931 CVE-2024-21140 · GHSA-7prq-r42m-wfcx

LOW 30

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.0094 Published 2024-07-16 Partial fix CWE-200

TI-2024-13936 CVE-2024-21145 · GHSA-4mqw-v4pq-hg97

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00856 Published 2024-07-16 Partial fix CWE-284

TI-2024-13929 CVE-2024-21138 · GHSA-4rqr-f9qq-h7w3

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01257 Published 2024-07-16 Partial fix

TI-2024-13922 CVE-2024-21131 · GHSA-v5pp-g8vf-3fxg

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0104 Published 2024-07-16 Partial fix