RHSA-2024:1817: Moderate: java-1.8.0-openjdk security update
Moderate: java-1.8.0-openjdk security update
Other sources
The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.<br>Security Fix(es):<br><li> OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)</li> <li> OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)</li> <li> OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)</li> <li> OpenJDK: C2 compilation fails with "Exceeded noderegs array" (8317507) (CVE-2024-21094)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:1817?
The severity of RHSA-2024:1817 is moderate.
How do I fix RHSA-2024:1817?
You can fix RHSA-2024:1817 by updating to the version 1.8.0-openjdk-1.8.0.412.b08-1.el7_9.
Which packages are affected by RHSA-2024:1817?
Affected packages include java, java-accessibility, java-debuginfo, java-demo, java-devel, and java-headless.
What is the security fix in RHSA-2024:1817?
The security fix addresses a long Exception message that could lead to a crash, identified as CVE-2024-21011.
Which platforms does RHSA-2024:1817 affect?
RHSA-2024:1817 affects various Red Hat Enterprise Linux platforms, including Power, IBM z Systems, and Desktop.