Linux · Security advisory · July 17, 2024

ALSA-2024:4568: Security update for 23 packages

ALSA-2024:4568, released July 17, 2024, fixes 5 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0126
69th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
java-17-openjdkalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdkalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-demoalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-demoalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-demo-fastdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-demo-fastdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-demo-slowdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-demo-slowdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-develalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-develalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-devel-fastdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-devel-fastdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-devel-slowdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-devel-slowdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-fastdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-fastdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-headlessalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-headlessalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-headless-fastdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-headless-fastdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-headless-slowdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-headless-slowdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-javadocalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-javadocalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-javadoc-zipalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-javadoc-zipalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-jmodsalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-jmodsalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-jmods-fastdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-jmods-fastdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-jmods-slowdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-jmods-slowdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-slowdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-slowdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-srcalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-srcalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-src-fastdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-src-fastdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-src-slowdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-src-slowdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-static-libsalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-static-libsalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-static-libs-fastdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-static-libs-fastdebugalmalinux 91:17.0.12.0.7-2.el9
java-17-openjdk-static-libs-slowdebugalmalinux 81:17.0.12.0.7-2.el8
java-17-openjdk-static-libs-slowdebugalmalinux 91:17.0.12.0.7-2.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-21138 java-11-openjdk: This update for java-11-openjdk fixes the following issues: Updated to version 11.0.24+8 (July 2024 CPU): - CVE-202... 7.4 0.0126 None reported
High CVE-2024-21147 java-11-openjdk: This update for java-11-openjdk fixes the following issues: Updated to version 11.0.24+8 (July 2024 CPU): - CVE-202... 7.4 0.0114 None reported
High CVE-2024-21131 java-11-openjdk: This update for java-11-openjdk fixes the following issues: Updated to version 11.0.24+8 (July 2024 CPU): - CVE-202... 7.4 0.0104 None reported
High CVE-2024-21140 java-11-openjdk: This update for java-11-openjdk fixes the following issues: Updated to version 11.0.24+8 (July 2024 CPU): - CVE-202... 7.4 0.0094 None reported
High CVE-2024-21145 java-11-openjdk: This update for java-11-openjdk fixes the following issues: Updated to version 11.0.24+8 (July 2024 CPU): - CVE-202... 7.4 0.0086 None reported
Showing 1 to 5 of 5 1