Red Hat Security AdvisoryRHSA-2024:8120
java-11-openjdk security update
Released 2024-10-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) java-11-openjdk-1:11.0.25.0.9-1.el7_9, java-11-openjdk-devel-1:11.0.25.0.9-1.el7_9, java-11-openjdk-headless-1:11.0.25.0.9-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) java-11-openjdk-demo-1:11.0.25.0.9-1.el7_9, java-11-openjdk-javadoc-1:11.0.25.0.9-1.el7_9, java-11-openjdk-javadoc-zip-1:11.0.25.0.9-1.el7_9 +3
Fixes 5 records
Priority LOW 32
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00425 · Published 2023-11-22 · Partial fix CWE-787
Priority LOW 24
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00929 · Published 2024-10-15 · Partial fix
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01149 · Published 2024-10-15 · Partial fix CWE-502
Priority LOW 20
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.01012 · Published 2024-10-15 · Partial fix CWE-203
Priority LOW 19
Vulnerability in Oracle Java SE (component: Hotspot).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.0081 · Published 2024-10-15 · Partial fix CWE-203
THREATIST.IORead the docs