exploitDog

SUSE-SU-2024:0619-1

Опубликовано: 26 фев. 2024

Источник: suse-cvrf

Описание

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843]

Security fixes:

CVE-2023-33850: Fixed information disclosure vulnerability due to the consumed GSKit library (bsc#1219843).
CVE-2024-20932: Fixed incorrect handling of ZIP files with duplicate entries (bsc#1218908).
CVE-2024-20952: Fixed RSA padding issue and timing side-channel attack against TLS (bsc#1218911).
CVE-2024-20918: Fixed array out-of-bounds access due to missing range check in C1 compiler (bsc#1218907).
CVE-2024-20921: Fixed range check loop optimization issue (bsc#1218905).
CVE-2024-20919: Fixed JVM class file verifier flaw allows unverified bytecode execution (bsc#1218903).
CVE-2024-20926: Fixed arbitrary Java code execution in Nashorn (bsc#1218906).
CVE-2024-20945: Fixed logging of digital signature private keys (bsc#1218909).

Список пакетов

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-EC2-HVM

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-GCE

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAP

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAP-Azure

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAP-EC2

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAP-GCE

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAPCAL

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAPCAL-Azure

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAPCAL-EC2

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP4-SAPCAL-GCE

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP5-SAPCAL-Azure

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP5-SAPCAL-EC2

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP5-SAPCAL-GCE

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAP

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAP-Azure

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAP-EC2

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAP-GCE

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAPCAL

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAPCAL-Azure

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAPCAL-EC2

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP6-SAPCAL-GCE

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP7-SAPCAL-Azure

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP7-SAPCAL-EC2

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP7-SAPCAL-GCE

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Enterprise Storage 7.1

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Linux Enterprise Module for Legacy 15 SP5

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Linux Enterprise Server 15 SP2-LTSS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Linux Enterprise Server 15 SP3-LTSS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Linux Enterprise Server 15 SP4-LTSS

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

openSUSE Leap 15.5

java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-32bit-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-alsa-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-demo-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-devel-32bit-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-plugin-1.8.0_sr8.20-150000.3.86.1

java-1_8_0-ibm-src-1.8.0_sr8.20-150000.3.86.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240619-1/
Link for SUSE-SU-2024:0619-1
https://lists.suse.com/pipermail/sle-security-updates/2024-February/018007.html
E-Mail link for SUSE-SU-2024:0619-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1218903
SUSE Bug 1218903
https://bugzilla.suse.com/1218905
SUSE Bug 1218905
https://bugzilla.suse.com/1218906
SUSE Bug 1218906
https://bugzilla.suse.com/1218907
SUSE Bug 1218907
https://bugzilla.suse.com/1218908
SUSE Bug 1218908
https://bugzilla.suse.com/1218909
SUSE Bug 1218909
https://bugzilla.suse.com/1218911
SUSE Bug 1218911
https://bugzilla.suse.com/1219843
SUSE Bug 1219843
https://www.suse.com/security/cve/CVE-2023-33850/
SUSE CVE CVE-2023-33850 page
https://www.suse.com/security/cve/CVE-2024-20918/
SUSE CVE CVE-2024-20918 page
https://www.suse.com/security/cve/CVE-2024-20919/
SUSE CVE CVE-2024-20919 page
https://www.suse.com/security/cve/CVE-2024-20921/
SUSE CVE CVE-2024-20921 page
https://www.suse.com/security/cve/CVE-2024-20926/
SUSE CVE CVE-2024-20926 page
https://www.suse.com/security/cve/CVE-2024-20932/
SUSE CVE CVE-2024-20932 page
https://www.suse.com/security/cve/CVE-2024-20945/
SUSE CVE CVE-2024-20945 page
https://www.suse.com/security/cve/CVE-2024-20952/
SUSE CVE CVE-2024-20952 page

Описание

IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.

Затронутые продукты

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

Ссылки

Описание

unknown

Затронутые продукты

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-1.8.0_sr8.20-150000.3.86.1

Image SLES15-SP3-SAPCAL-Azure:java-1_8_0-ibm-devel-1.8.0_sr8.20-150000.3.86.1

Ссылки

Уязвимость SUSE-SU-2024:0619-1