ELSA-2024-0249 — Important: java-21-openjdk security update (Oracle Linux 9)

Summary

[1:21.0.2.0.13-1.0.1]
- Add Oracle vendor bug URL

[1:21.0.2.0.13-1]
- Rebase to 21.0.2.0.13

Fixed packages 23

Release	Package	Fixed in
Oracle Linux · 9	java-21-openjdk	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-demo	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-demo-fastdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-demo-slowdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-devel	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-devel-fastdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-devel-slowdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-fastdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-headless	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-headless-fastdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-headless-slowdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-javadoc	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-javadoc-zip	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-jmods	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-jmods-fastdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-jmods-slowdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-slowdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-src	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-src-fastdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-src-slowdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-static-libs	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-static-libs-fastdebug	1:21.0.2.0.13-1.0.1.el9
Oracle Linux · 9	java-21-openjdk-static-libs-slowdebug	1:21.0.2.0.13-1.0.1.el9

Vulnerabilities 5

High 7.4

CVE-2024-20918

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 16, 2024
High 7.4

CVE-2024-20952

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 16, 2024
Medium 5.9

CVE-2024-20919

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Feb 17, 2024
Medium 5.9

CVE-2024-20921

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Feb 17, 2024
Medium 4.7

CVE-2024-20945

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Feb 17, 2024

Important: java-21-openjdk security update (Oracle Linux 9)

Summary

Fixed packages 23

Vulnerabilities 5

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…