(RHSA-2024:1828) Moderate: java-21-openjdk security update

2024-04-1814:26:57

access.redhat.com

openjdk

java

security update

cve-2024-21011

cve-2024-21068

cve-2024-21012

http/2

integer overflow

reverse dns lookup

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.8%

JSON

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9aarch64java-21-openjdk-jmods-slowdebug< 21.0.3.0.9-1.el9java-21-openjdk-jmods-slowdebug-21.0.3.0.9-1.el9.aarch64.rpm
RedHat8x86_64java-21-openjdk-demo-slowdebug< 21.0.3.0.9-1.el8java-21-openjdk-demo-slowdebug-21.0.3.0.9-1.el8.x86_64.rpm
RedHat8x86_64java-21-openjdk-debuginfo< 21.0.3.0.9-1.el8java-21-openjdk-debuginfo-21.0.3.0.9-1.el8.x86_64.rpm
RedHat9x86_64java-21-openjdk-src-fastdebug< 21.0.3.0.9-1.el9java-21-openjdk-src-fastdebug-21.0.3.0.9-1.el9.x86_64.rpm
RedHat8x86_64java-21-openjdk-javadoc-zip< 21.0.3.0.9-1.el8java-21-openjdk-javadoc-zip-21.0.3.0.9-1.el8.x86_64.rpm
RedHat8x86_64java-21-openjdk-slowdebug-debuginfo< 21.0.3.0.9-1.el8java-21-openjdk-slowdebug-debuginfo-21.0.3.0.9-1.el8.x86_64.rpm
RedHat8x86_64java-21-openjdk-devel-debuginfo< 21.0.3.0.9-1.el8java-21-openjdk-devel-debuginfo-21.0.3.0.9-1.el8.x86_64.rpm
RedHat9s390xjava-21-openjdk-demo-slowdebug< 21.0.3.0.9-1.el9java-21-openjdk-demo-slowdebug-21.0.3.0.9-1.el9.s390x.rpm
RedHat9x86_64java-21-openjdk-devel-fastdebug-debuginfo< 21.0.3.0.9-1.el9java-21-openjdk-devel-fastdebug-debuginfo-21.0.3.0.9-1.el9.x86_64.rpm
RedHat8aarch64java-21-openjdk-headless-slowdebug< 21.0.3.0.9-1.el8java-21-openjdk-headless-slowdebug-21.0.3.0.9-1.el8.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	aarch64	java-21-openjdk-jmods-slowdebug	< 21.0.3.0.9-1.el9	java-21-openjdk-jmods-slowdebug-21.0.3.0.9-1.el9.aarch64.rpm
RedHat	8	x86_64	java-21-openjdk-demo-slowdebug	< 21.0.3.0.9-1.el8	java-21-openjdk-demo-slowdebug-21.0.3.0.9-1.el8.x86_64.rpm
RedHat	8	x86_64	java-21-openjdk-debuginfo	< 21.0.3.0.9-1.el8	java-21-openjdk-debuginfo-21.0.3.0.9-1.el8.x86_64.rpm
RedHat	9	x86_64	java-21-openjdk-src-fastdebug	< 21.0.3.0.9-1.el9	java-21-openjdk-src-fastdebug-21.0.3.0.9-1.el9.x86_64.rpm
RedHat	8	x86_64	java-21-openjdk-javadoc-zip	< 21.0.3.0.9-1.el8	java-21-openjdk-javadoc-zip-21.0.3.0.9-1.el8.x86_64.rpm
RedHat	8	x86_64	java-21-openjdk-slowdebug-debuginfo	< 21.0.3.0.9-1.el8	java-21-openjdk-slowdebug-debuginfo-21.0.3.0.9-1.el8.x86_64.rpm
RedHat	8	x86_64	java-21-openjdk-devel-debuginfo	< 21.0.3.0.9-1.el8	java-21-openjdk-devel-debuginfo-21.0.3.0.9-1.el8.x86_64.rpm
RedHat	9	s390x	java-21-openjdk-demo-slowdebug	< 21.0.3.0.9-1.el9	java-21-openjdk-demo-slowdebug-21.0.3.0.9-1.el9.s390x.rpm
RedHat	9	x86_64	java-21-openjdk-devel-fastdebug-debuginfo	< 21.0.3.0.9-1.el9	java-21-openjdk-devel-fastdebug-debuginfo-21.0.3.0.9-1.el9.x86_64.rpm
RedHat	8	aarch64	java-21-openjdk-headless-slowdebug	< 21.0.3.0.9-1.el8	java-21-openjdk-headless-slowdebug-21.0.3.0.9-1.el8.aarch64.rpm