Medium RHSA-2024:8120 5 CVEs

Red Hat Security Advisory: java-11-openjdk security update

Published Oct 17, 2024 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 10

Release	Package	Fixed in
Red Hat · RHEL 7 ELS rhel_els:7	java-11-openjdk	1:11.0.25.0.9-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-11-openjdk-debuginfo	1:11.0.25.0.9-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-11-openjdk-demo	1:11.0.25.0.9-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-11-openjdk-devel	1:11.0.25.0.9-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-11-openjdk-headless	1:11.0.25.0.9-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-11-openjdk-javadoc	1:11.0.25.0.9-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-11-openjdk-javadoc-zip	1:11.0.25.0.9-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-11-openjdk-jmods	1:11.0.25.0.9-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-11-openjdk-src	1:11.0.25.0.9-1.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	java-11-openjdk-static-libs	1:11.0.25.0.9-1.el7_9

Vulnerabilities 5

Medium 4.8

CVE-2024-21235

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 15, 2024
Low 3.7

CVE-2024-21208

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 15, 2024
Low 3.7

CVE-2024-21210

Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 15, 2024
Low 3.7

CVE-2024-21217

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 15, 2024
Unscored —

CVE-2023-48161

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information …

giflib giflib giflib Debian Azure Linux Alpine

Nov 22, 2023

References

article
https://access.redhat.com/security/updates/classification/#moderate
report
https://bugzilla.redhat.com/show_bug.cgi?id=2251025
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318524
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318526
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318530
report
https://bugzilla.redhat.com/show_bug.cgi?id=2318534
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8120.json
report
https://access.redhat.com/security/cve/CVE-2023-48161
advisory
https://www.cve.org/CVERecord?id=CVE-2023-48161
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-48161
article
https://github.com/tacetool/TACE#cve-2023-48161
article
https://sourceforge.net/p/giflib/bugs/167/
report
https://access.redhat.com/security/cve/CVE-2024-21208
advisory
https://www.cve.org/CVERecord?id=CVE-2024-21208
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-21208
report
https://access.redhat.com/security/cve/CVE-2024-21210
advisory
https://www.cve.org/CVERecord?id=CVE-2024-21210
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-21210
report
https://access.redhat.com/security/cve/CVE-2024-21217
advisory
https://www.cve.org/CVERecord?id=CVE-2024-21217
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-21217
report
https://access.redhat.com/security/cve/CVE-2024-21235
advisory
https://www.cve.org/CVERecord?id=CVE-2024-21235
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-21235