Описание
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]
Security fixes:
- CVE-2023-33850: Fixed information disclosure vulnerability due to the consumed GSKit library (bsc#1219843).
- CVE-2024-20932: Fixed incorrect handling of ZIP files with duplicate entries (bsc#1218908).
- CVE-2024-20952: Fixed RSA padding issue and timing side-channel attack against TLS (bsc#1218911).
- CVE-2024-20918: Fixed array out-of-bounds access due to missing range check in C1 compiler (bsc#1218907).
- CVE-2024-20921: Fixed range check loop optimization issue (bsc#1218905).
- CVE-2024-20919: Fixed JVM class file verifier flaw allows unverified bytecode execution (bsc#1218903).
- CVE-2024-20926: Fixed arbitrary Java code execution in Nashorn (bsc#1218906).
- CVE-2024-20945: Fixed logging of digital signature private keys (bsc#1218909).
Список пакетов
SUSE Linux Enterprise Server 12 SP5
java-1_8_0-ibm-1.8.0_sr8.20-30.120.1
java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1
java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
java-1_8_0-ibm-1.8.0_sr8.20-30.120.1
java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1
java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Software Development Kit 12 SP5
java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
Ссылки
- Link for SUSE-SU-2024:0605-1
- E-Mail link for SUSE-SU-2024:0605-1
- SUSE Security Ratings
- SUSE Bug 1218903
- SUSE Bug 1218905
- SUSE Bug 1218906
- SUSE Bug 1218907
- SUSE Bug 1218908
- SUSE Bug 1218909
- SUSE Bug 1218911
- SUSE Bug 1219843
- SUSE CVE CVE-2023-33850 page
- SUSE CVE CVE-2024-20918 page
- SUSE CVE CVE-2024-20919 page
- SUSE CVE CVE-2024-20921 page
- SUSE CVE CVE-2024-20926 page
- SUSE CVE CVE-2024-20932 page
- SUSE CVE CVE-2024-20945 page
- SUSE CVE CVE-2024-20952 page
Описание
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1
Ссылки
- CVE-2023-33850
- SUSE Bug 1219843
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1
Ссылки
- CVE-2024-20918
- SUSE Bug 1218907
- SUSE Bug 1219843
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1
Ссылки
- CVE-2024-20919
- SUSE Bug 1218903
- SUSE Bug 1219843
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1
Ссылки
- CVE-2024-20921
- SUSE Bug 1218905
- SUSE Bug 1219843
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1
Ссылки
- CVE-2024-20926
- SUSE Bug 1218906
- SUSE Bug 1219843
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1
Ссылки
- CVE-2024-20932
- SUSE Bug 1218908
- SUSE Bug 1219843
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1
Ссылки
- CVE-2024-20945
- SUSE Bug 1218909
- SUSE Bug 1219843
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.20-30.120.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.20-30.120.1
Ссылки
- CVE-2024-20952
- SUSE Bug 1218911
- SUSE Bug 1219843