SUSE-SU-2024:0479-1

Опубликовано: 15 фев. 2024

Источник: suse-cvrf

Описание

Security update for java-1_8_0-openj9

This update for java-1_8_0-openj9 fixes the following issues:

Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual machine

Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214
CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903), CVE-2024-20921 (bsc#1218905), CVE-2024-20926 (bsc#1218906), CVE-2024-20945 (bsc#1218909), CVE-2024-20952 (bsc#1218911)

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP5

java-1_8_0-openj9-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-accessibility-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-demo-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-devel-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-headless-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-src-1.8.0.402-150200.3.42.1

openSUSE Leap 15.5

java-1_8_0-openj9-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-accessibility-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-demo-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-devel-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-headless-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-javadoc-1.8.0.402-150200.3.42.1

java-1_8_0-openj9-src-1.8.0.402-150200.3.42.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240479-1/
Link for SUSE-SU-2024:0479-1
https://lists.suse.com/pipermail/sle-updates/2024-February/034224.html
E-Mail link for SUSE-SU-2024:0479-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1217214
SUSE Bug 1217214
https://bugzilla.suse.com/1218903
SUSE Bug 1218903
https://bugzilla.suse.com/1218905
SUSE Bug 1218905
https://bugzilla.suse.com/1218906
SUSE Bug 1218906
https://bugzilla.suse.com/1218907
SUSE Bug 1218907
https://bugzilla.suse.com/1218909
SUSE Bug 1218909
https://bugzilla.suse.com/1218911
SUSE Bug 1218911
https://www.suse.com/security/cve/CVE-2023-5676/
SUSE CVE CVE-2023-5676 page
https://www.suse.com/security/cve/CVE-2024-20918/
SUSE CVE CVE-2024-20918 page
https://www.suse.com/security/cve/CVE-2024-20919/
SUSE CVE CVE-2024-20919 page
https://www.suse.com/security/cve/CVE-2024-20921/
SUSE CVE CVE-2024-20921 page
https://www.suse.com/security/cve/CVE-2024-20926/
SUSE CVE CVE-2024-20926 page
https://www.suse.com/security/cve/CVE-2024-20945/
SUSE CVE CVE-2024-20945 page
https://www.suse.com/security/cve/CVE-2024-20952/
SUSE CVE CVE-2024-20952 page

Описание

In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentation fault if a shutdown signal (SIGTERM, SIGINT or SIGHUP) is received before the JVM has finished initializing.

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-accessibility-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-demo-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-devel-1.8.0.402-150200.3.42.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-5676.html
CVE-2023-5676
https://bugzilla.suse.com/1217214
SUSE Bug 1217214

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-accessibility-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-demo-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-devel-1.8.0.402-150200.3.42.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-20918.html
CVE-2024-20918
https://bugzilla.suse.com/1218907
SUSE Bug 1218907
https://bugzilla.suse.com/1219843
SUSE Bug 1219843

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-accessibility-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-demo-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-devel-1.8.0.402-150200.3.42.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-20919.html
CVE-2024-20919
https://bugzilla.suse.com/1218903
SUSE Bug 1218903
https://bugzilla.suse.com/1219843
SUSE Bug 1219843

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-accessibility-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-demo-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-devel-1.8.0.402-150200.3.42.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-20921.html
CVE-2024-20921
https://bugzilla.suse.com/1218905
SUSE Bug 1218905
https://bugzilla.suse.com/1219843
SUSE Bug 1219843

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-accessibility-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-demo-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-devel-1.8.0.402-150200.3.42.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-20926.html
CVE-2024-20926
https://bugzilla.suse.com/1218906
SUSE Bug 1218906
https://bugzilla.suse.com/1219843
SUSE Bug 1219843

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-accessibility-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-demo-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-devel-1.8.0.402-150200.3.42.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-20945.html
CVE-2024-20945
https://bugzilla.suse.com/1218909
SUSE Bug 1218909
https://bugzilla.suse.com/1219843
SUSE Bug 1219843

Описание

unknown

Затронутые продукты

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-accessibility-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-demo-1.8.0.402-150200.3.42.1

SUSE Linux Enterprise Module for Package Hub 15 SP5:java-1_8_0-openj9-devel-1.8.0.402-150200.3.42.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-20952.html
CVE-2024-20952
https://bugzilla.suse.com/1218911
SUSE Bug 1218911
https://bugzilla.suse.com/1219843
SUSE Bug 1219843

SUSE-SU-2024:0479-1

Описание

Список пакетов

SUSE Linux Enterprise Module for Package Hub 15 SP5

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2023-5676

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-20918

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-20919

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-20921

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-20926

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-20945

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-20952

Описание

Затронутые продукты

Ссылки