Red Hat Security Advisory

RHSA-2024:8117

java-1.8.0-openjdk security update

Released 2024-10-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.8.8) java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.432.b06-2.el8, java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.432.b06-2.el8, java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.432.b06-2.el8 +9
Red Hat CodeReady Linux Builder EUS (v.9.2) java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.432.b06-2.el9, java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.432.b06-2.el9, java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.432.b06-2.el9 +7
Red Hat Enterprise Linux AppStream (v. 8) java-1.8.0-openjdk-1:1.8.0.432.b06-2.el8, java-1.8.0-openjdk-accessibility-1:1.8.0.432.b06-2.el8, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-2.el8 +5
Red Hat Enterprise Linux AppStream (v. 9) java-1.8.0-openjdk-1:1.8.0.432.b06-2.el9, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-2.el9, java-1.8.0-openjdk-devel-1:1.8.0.432.b06-2.el9 +4
Red Hat Enterprise Linux AppStream AUS (v. 8.2) java-1.8.0-openjdk-1:1.8.0.432.b06-1.el8_2, java-1.8.0-openjdk-accessibility-1:1.8.0.432.b06-1.el8_2, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-1.el8_2 +5
Red Hat Enterprise Linux AppStream AUS (v.8.4) java-1.8.0-openjdk-1:1.8.0.432.b06-1.el8_4, java-1.8.0-openjdk-accessibility-1:1.8.0.432.b06-1.el8_4, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-1.el8_4 +5
Red Hat Enterprise Linux AppStream AUS (v.8.6) java-1.8.0-openjdk-1:1.8.0.432.b06-1.el8_6, java-1.8.0-openjdk-accessibility-1:1.8.0.432.b06-1.el8_6, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-1.el8_6 +5
Red Hat Enterprise Linux AppStream E4S (v.8.4) java-1.8.0-openjdk-1:1.8.0.432.b06-1.el8_4, java-1.8.0-openjdk-accessibility-1:1.8.0.432.b06-1.el8_4, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-1.el8_4 +5
Red Hat Enterprise Linux AppStream E4S (v.8.6) java-1.8.0-openjdk-1:1.8.0.432.b06-1.el8_6, java-1.8.0-openjdk-accessibility-1:1.8.0.432.b06-1.el8_6, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-1.el8_6 +5
Red Hat Enterprise Linux AppStream E4S (v.9.0) java-1.8.0-openjdk-1:1.8.0.432.b06-1.el9_0, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-1.el9_0, java-1.8.0-openjdk-devel-1:1.8.0.432.b06-1.el9_0 +4
Red Hat Enterprise Linux AppStream EUS (v.8.8) java-1.8.0-openjdk-1:1.8.0.432.b06-2.el8, java-1.8.0-openjdk-accessibility-1:1.8.0.432.b06-2.el8, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-2.el8 +5
Red Hat Enterprise Linux AppStream EUS (v.9.2) java-1.8.0-openjdk-1:1.8.0.432.b06-2.el9, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-2.el9, java-1.8.0-openjdk-devel-1:1.8.0.432.b06-2.el9 +4
Red Hat Enterprise Linux AppStream TUS (v.8.4) java-1.8.0-openjdk-1:1.8.0.432.b06-1.el8_4, java-1.8.0-openjdk-accessibility-1:1.8.0.432.b06-1.el8_4, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-1.el8_4 +5
Red Hat Enterprise Linux AppStream TUS (v.8.6) java-1.8.0-openjdk-1:1.8.0.432.b06-1.el8_6, java-1.8.0-openjdk-accessibility-1:1.8.0.432.b06-1.el8_6, java-1.8.0-openjdk-demo-1:1.8.0.432.b06-1.el8_6 +5
Red Hat Enterprise Linux CRB (v. 8) java-1.8.0-openjdk-accessibility-fastdebug-1:1.8.0.432.b06-2.el8, java-1.8.0-openjdk-accessibility-slowdebug-1:1.8.0.432.b06-2.el8, java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.432.b06-2.el8 +9
Red Hat Enterprise Linux CRB (v. 9) java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.432.b06-2.el9, java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.432.b06-2.el9, java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.432.b06-2.el9 +7

Fixes 5 records

TI-2023-26058 CVE-2023-48161 · GHSA-rgc3-xv9w-g763

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to…

LOW 32

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00425 Published 2023-11-22 Partial fix CWE-787

TI-2024-14012 CVE-2024-21235 · GHSA-rv92-jf3g-p8qp

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise…

LOW 24

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00929 Published 2024-10-15 Partial fix

TI-2024-14004 CVE-2024-21217 · GHSA-8gw4-4gr2-h2mr

Deserialization of untrusted data in Oracle Java SE

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01149 Published 2024-10-15 Partial fix CWE-502

TI-2024-13995 CVE-2024-21208 · GHSA-vhqv-fr8v-3cwq

Observable discrepancy in Oracle Java SE

LOW 20

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01012 Published 2024-10-15 Partial fix CWE-203

TI-2024-13997 CVE-2024-21210 · GHSA-fjvg-5x2f-67rq

Observable discrepancy in Oracle Java SE

LOW 19

Vulnerability in Oracle Java SE (component: Hotspot).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0081 Published 2024-10-15 Partial fix CWE-203