Red Hat Security AdvisoryRHSA-2024:8116
java-1.8.0-openjdk security update
Released 2024-10-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) java-1.8.0-openjdk-1:1.8.0.432.b06-1.el7_9, java-1.8.0-openjdk-devel-1:1.8.0.432.b06-1.el7_9, java-1.8.0-openjdk-headless-1:1.8.0.432.b06-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) java-1.8.0-openjdk-accessibility-1:1.8.0.432.b06-1.el7_9, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-1.el7_9, java-1.8.0-openjdk-javadoc-1:1.8.0.432.b06-1.el7_9 +2
Fixes 5 records
Priority LOW 32
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00425 · Published 2023-11-22 · Partial fix CWE-787
Priority LOW 24
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00929 · Published 2024-10-15 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01149 · Published 2024-10-15 · Partial fix CWE-502
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01012 · Published 2024-10-15 · Partial fix CWE-203
Priority LOW 19
Vulnerability in Oracle Java SE (component: Hotspot).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.0081 · Published 2024-10-15 · Partial fix CWE-203
THREATIST.IORead the docs