Описание
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues:
Updated to version 11.0.24+8 (July 2024 CPU):
- CVE-2024-21131: Fixed a potential UTF8 size overflow (bsc#1228046).
- CVE-2024-21138: Fixed an infinite loop due to excessive symbol length (bsc#1228047).
- CVE-2024-21140: Fixed a pre-loop limit overflow in Range Check Elimination (bsc#1228048).
- CVE-2024-21147: Fixed an out-of-bounds access in 2D image handling (bsc#1228052).
- CVE-2024-21145: Fixed an index overflow in RangeCheckElimination (bsc#1228051).
- CVE-2024-21144: Fixed an excessive loading time in Pack200 due to improper header validation (bsc#1228050).
Список пакетов
SUSE Linux Enterprise Server 12 SP5
java-11-openjdk-11.0.24.0-3.78.1
java-11-openjdk-demo-11.0.24.0-3.78.1
java-11-openjdk-devel-11.0.24.0-3.78.1
java-11-openjdk-headless-11.0.24.0-3.78.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
java-11-openjdk-11.0.24.0-3.78.1
java-11-openjdk-demo-11.0.24.0-3.78.1
java-11-openjdk-devel-11.0.24.0-3.78.1
java-11-openjdk-headless-11.0.24.0-3.78.1
Ссылки
- Link for SUSE-SU-2024:2590-1
- E-Mail link for SUSE-SU-2024:2590-1
- SUSE Security Ratings
- SUSE Bug 1227298
- SUSE Bug 1228046
- SUSE Bug 1228047
- SUSE Bug 1228048
- SUSE Bug 1228050
- SUSE Bug 1228051
- SUSE Bug 1228052
- SUSE CVE CVE-2024-21131 page
- SUSE CVE CVE-2024-21138 page
- SUSE CVE CVE-2024-21140 page
- SUSE CVE CVE-2024-21144 page
- SUSE CVE CVE-2024-21145 page
- SUSE CVE CVE-2024-21147 page
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-demo-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-devel-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-headless-11.0.24.0-3.78.1
Ссылки
- CVE-2024-21131
- SUSE Bug 1228046
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-demo-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-devel-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-headless-11.0.24.0-3.78.1
Ссылки
- CVE-2024-21138
- SUSE Bug 1228047
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-demo-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-devel-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-headless-11.0.24.0-3.78.1
Ссылки
- CVE-2024-21140
- SUSE Bug 1228048
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-demo-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-devel-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-headless-11.0.24.0-3.78.1
Ссылки
- CVE-2024-21144
- SUSE Bug 1228050
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-demo-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-devel-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-headless-11.0.24.0-3.78.1
Ссылки
- CVE-2024-21145
- SUSE Bug 1228051
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-demo-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-devel-11.0.24.0-3.78.1
SUSE Linux Enterprise Server 12 SP5:java-11-openjdk-headless-11.0.24.0-3.78.1
Ссылки
- CVE-2024-21147
- SUSE Bug 1228052