Threats Tagged 'cve-2024-21012'

A security update for the java-11-openjdk packages on Red Hat Enterprise Linux 7 addresses multiple vulnerabilities including crashes from long exception messages, integer overflow in compiler address generation, excessive memory allocation, compilation failures, and improper reverse DNS lookups in the HTTP/2 client. These issues have been rated with moderate severity by Red Hat Product Security. The update requires restarting all running OpenJDK Java instances to take effect.

Multiple security vulnerabilities affecting the java-11-openjdk packages in Red Hat Enterprise Linux have been addressed in a security update. These include issues such as crashes from long exception messages, integer overflow in compiler address generation, excessive memory allocation, compilation failures, and improper reverse DNS lookups in the HTTP/2 client. The update is rated with moderate severity and applies to various Red Hat Enterprise Linux 8 and 9 versions and architectures. Users must apply the update and restart all running OpenJDK Java instances to mitigate these issues.

Multiple security vulnerabilities have been identified and fixed in the java-17-openjdk packages provided by Red Hat, which include the OpenJDK 17 Java Runtime Environment and Software Development Kit. The issues addressed include a crash caused by a long Exception message, an integer overflow in the C1 compiler address generation, a failure in C2 compilation due to exceeding an internal array, and an improper reverse DNS lookup in the HTTP/2 client. These vulnerabilities have been rated with a moderate security impact by Red Hat. Updates are available for various Red Hat Enterprise Linux versions and architectures. Applying the update requires restarting all running OpenJDK Java instances for the fixes to take effect.

Multiple vulnerabilities have been identified in the java-21-openjdk packages used in Red Hat Enterprise Linux 8 and 9. These include a long exception message that can cause a crash (CVE-2024-21011), an integer overflow in the C1 compiler address generation (CVE-2024-21068), and an improper reverse DNS lookup in the HTTP/2 client (CVE-2024-21012). Red Hat has issued a security update addressing these issues with a moderate security impact rating.