ELSA-2024-0267 — Important: java-17-openjdk security and bug fix update (Oracle Linux 8)

Summary

[1:17.0.10.0.7-2.0.1]
- Rebase to 17.0.10.0.7

Fixed packages 23

Release	Package	Fixed in
Oracle Linux · 8	java-17-openjdk	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-demo	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-demo-fastdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-demo-slowdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-devel	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-devel-fastdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-devel-slowdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-fastdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-headless	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-headless-fastdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-headless-slowdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-javadoc	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-javadoc-zip	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-jmods	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-jmods-fastdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-jmods-slowdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-slowdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-src	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-src-fastdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-src-slowdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-static-libs	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-static-libs-fastdebug	1:17.0.10.0.7-2.0.1.el9
Oracle Linux · 8	java-17-openjdk-static-libs-slowdebug	1:17.0.10.0.7-2.0.1.el9

Vulnerabilities 6

High 7.5

CVE-2024-20932

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-9 openjdk-13 Debian Ubuntu Alpine

Jan 16, 2024
High 7.4

CVE-2024-20918

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 16, 2024
High 7.4

CVE-2024-20952

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 16, 2024
Medium 5.9

CVE-2024-20919

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Feb 17, 2024
Medium 5.9

CVE-2024-20921

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Feb 17, 2024
Medium 4.7

CVE-2024-20945

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Feb 17, 2024

Important: java-17-openjdk security and bug fix update (Oracle Linux 8)

Summary

Fixed packages 23

Vulnerabilities 6

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…