This Red Hat security advisory (RHSA-2024:4564) addresses six vulnerabilities in the java-11-openjdk packages for OpenJDK 11 on Red Hat Enterprise Linux 7 Extended Lifecycle Support. The fixed issues include CVE-2024-21131 (potential UTF8 size overflow), CVE-2024-21138 (excessive symbol length leading to infinite loop), CVE-2024-21140 (Range Check Elimination pre-loop limit overflow), CVE-2024-21144 (Pack200 improper header validation causing increased loading time), CVE-2024-21145 (out-of-bounds access in 2D image handling), and CVE-2024-21147 (RangeCheckElimination array index overflow). Red Hat rates the security impact as Important. The advisory provides updated packages and instructions for applying the update, including restarting all OpenJDK Java instances.

The vulnerabilities fixed in this update could lead to issues such as array index overflows, potential memory size overflows, infinite loops, increased loading times, and out-of-bounds memory access within the OpenJDK 11 runtime and development kit. These issues may affect the stability and security of applications running on the affected OpenJDK versions. Red Hat classifies the overall security impact as Important, indicating a high severity level but not critical. No known exploits in the wild have been reported at this time.

Red Hat has released an official security update for the java-11-openjdk packages on Red Hat Enterprise Linux 7 Extended Lifecycle Support. Users should apply the update as detailed in Red Hat advisory RHSA-2024:4564 and restart all running OpenJDK Java instances to ensure the fixes take effect. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.