Moderate: java-21-openjdk security update

2024-04-1800:00:00

errata.almalinux.org

openjdk

security update

crash

integer overflow

http/2 client

cve-2024-21011

cve-2024-21068

cve-2024-21012

cvss score

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.2%

JSON

The java-21-openjdk packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit.

Security Fix(es):

OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
OpenJDK: HTTP/2 client improper reverse DNS lookup (8315708) (CVE-2024-21012)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux9ppc64lejava-21-openjdk-src< 21.0.3.0.9-1.el9.alma.1java-21-openjdk-src-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux9ppc64lejava-21-openjdk< 21.0.3.0.9-1.el9.alma.1java-21-openjdk-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux9ppc64lejava-21-openjdk-javadoc< 21.0.3.0.9-1.el9.alma.1java-21-openjdk-javadoc-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux9ppc64lejava-21-openjdk-devel< 21.0.3.0.9-1.el9.alma.1java-21-openjdk-devel-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux9ppc64lejava-21-openjdk-jmods< 21.0.3.0.9-1.el9.alma.1java-21-openjdk-jmods-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux9ppc64lejava-21-openjdk-demo< 21.0.3.0.9-1.el9.alma.1java-21-openjdk-demo-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux9ppc64lejava-21-openjdk-javadoc-zip< 21.0.3.0.9-1.el9.alma.1java-21-openjdk-javadoc-zip-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux9ppc64lejava-21-openjdk-static-libs< 21.0.3.0.9-1.el9.alma.1java-21-openjdk-static-libs-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux9ppc64lejava-21-openjdk-headless< 21.0.3.0.9-1.el9.alma.1java-21-openjdk-headless-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux9x86_64java-21-openjdk-headless< 21.0.3.0.9-1.el9.alma.1java-21-openjdk-headless-21.0.3.0.9-1.el9.alma.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	9	ppc64le	java-21-openjdk-src	< 21.0.3.0.9-1.el9.alma.1	java-21-openjdk-src-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux	9	ppc64le	java-21-openjdk	< 21.0.3.0.9-1.el9.alma.1	java-21-openjdk-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux	9	ppc64le	java-21-openjdk-javadoc	< 21.0.3.0.9-1.el9.alma.1	java-21-openjdk-javadoc-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux	9	ppc64le	java-21-openjdk-devel	< 21.0.3.0.9-1.el9.alma.1	java-21-openjdk-devel-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux	9	ppc64le	java-21-openjdk-jmods	< 21.0.3.0.9-1.el9.alma.1	java-21-openjdk-jmods-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux	9	ppc64le	java-21-openjdk-demo	< 21.0.3.0.9-1.el9.alma.1	java-21-openjdk-demo-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux	9	ppc64le	java-21-openjdk-javadoc-zip	< 21.0.3.0.9-1.el9.alma.1	java-21-openjdk-javadoc-zip-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux	9	ppc64le	java-21-openjdk-static-libs	< 21.0.3.0.9-1.el9.alma.1	java-21-openjdk-static-libs-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux	9	ppc64le	java-21-openjdk-headless	< 21.0.3.0.9-1.el9.alma.1	java-21-openjdk-headless-21.0.3.0.9-1.el9.alma.1.ppc64le.rpm
almalinux	9	x86_64	java-21-openjdk-headless	< 21.0.3.0.9-1.el9.alma.1	java-21-openjdk-headless-21.0.3.0.9-1.el9.alma.1.x86_64.rpm