Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
OpenJDK Java 21 Update Fixes Multiple Security Risks
published 2 years ago
Summary
This update fixes security issues in the OpenJDK Java 21 runtime environment that could allow hackers to crash the system or steal sensitive information. Affected users should update to the latest version to protect their systems. Failure to update may leave systems open to potential attacks.
What to do
- Update almalinux java-21-openjdk to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-demo to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-demo-fastdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-demo-slowdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-devel to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-devel-fastdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-devel-slowdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-fastdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-headless to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-headless-fastdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-headless-slowdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-javadoc to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-javadoc-zip to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-jmods to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-jmods-fastdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-jmods-slowdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-slowdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-src to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-src-fastdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-src-slowdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-static-libs to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-static-libs-fastdebug to version 1:21.0.5.0.10-3.el9.alma.1.
- Update almalinux java-21-openjdk-static-libs-slowdebug to version 1:21.0.5.0.10-3.el9.alma.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:9 | almalinux | java-21-openjdk |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-demo |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-demo-fastdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-demo-slowdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-devel |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-devel-fastdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-devel-slowdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-fastdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-headless |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-headless-fastdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-headless-slowdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-javadoc |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-javadoc-zip |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-jmods |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-jmods-fastdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-jmods-slowdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-slowdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-src |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-src-fastdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-src-slowdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-static-libs |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-static-libs-fastdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
| AlmaLinux:9 | almalinux | java-21-openjdk-static-libs-slowdebug |
< 1:21.0.5.0.10-3.el9.alma.1 Fix: upgrade to 1:21.0.5.0.10-3.el9.alma.1
|
Original advisory text
Moderate: java-21-openjdk security update
The OpenJDK 21 runtime environment.
Security Fix(es):
* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function (CVE-2023-48161)
* JDK: Array indexing integer overflow (8328544) (CVE-2024-21210)
* JDK: HTTP client improper handling of maxHeaderSize (8328286) (CVE-2024-21208)
* JDK: Unbounded allocation leads to out-of-memory error (8331446) (CVE-2024-21217)
* JDK: Integer conversion error leads to incorrect range check (8332644) (CVE-2024-21235)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2024:8127 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-48161 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-21208 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-21210 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-21217 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-21235 Third Party Advisory
- https://bugzilla.redhat.com/2251025 Third Party Advisory
- https://bugzilla.redhat.com/2318524 Third Party Advisory
- https://bugzilla.redhat.com/2318526 Third Party Advisory
- https://bugzilla.redhat.com/2318530 Third Party Advisory
- https://bugzilla.redhat.com/2318534 Third Party Advisory
- https://errata.almalinux.org/9/ALSA-2024-8127.html Vendor Advisory
Timeline
Published16 Oct 2024
Updated29 Mar 2026
First seen29 Mar 2026
Sources
ALSA-2024:8127 · OSV
Track software like this
Free during beta