SUSE-SU-2024:2628-1

Опубликовано: 30 июл. 2024

Источник: suse-cvrf

Описание

Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues:

Updated to version 17.0.12+7 (July 2024 CPU):

CVE-2024-21131: Fixed a potential UTF8 size overflow (bsc#1228046).
CVE-2024-21138: Fixed an infinite loop due to excessive symbol length (bsc#1228047).
CVE-2024-21140: Fixed a pre-loop limit overflow in Range Check Elimination (bsc#1228048).
CVE-2024-21147: Fixed an out-of-bounds access in 2D image handling (bsc#1228052).
CVE-2024-21145: Fixed an index overflow in RangeCheckElimination (bsc#1228051).

Список пакетов

Container bci/openjdk-devel:17

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container bci/openjdk:17

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container containers/apache-tomcat:10.1-openjdk17

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container containers/apache-tomcat:9-openjdk17

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container suse/manager/5.0/x86_64/server:latest

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container suse/multi-linux-manager/5.1/x86_64/server-attestation:latest

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Image server-attestation-image

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Image server-image

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Image server-image-sles15sp7

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-demo-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-demo-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-demo-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

SUSE Linux Enterprise Module for Legacy 15 SP6

java-17-openjdk-demo-17.0.12.0-150400.3.45.1

SUSE Linux Enterprise Server 15 SP4-LTSS

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-demo-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-demo-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

SUSE Manager Proxy 4.3

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-demo-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

SUSE Manager Server 4.3

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-demo-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

openSUSE Leap 15.5

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-demo-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

java-17-openjdk-javadoc-17.0.12.0-150400.3.45.1

java-17-openjdk-jmods-17.0.12.0-150400.3.45.1

java-17-openjdk-src-17.0.12.0-150400.3.45.1

openSUSE Leap 15.6

java-17-openjdk-17.0.12.0-150400.3.45.1

java-17-openjdk-demo-17.0.12.0-150400.3.45.1

java-17-openjdk-devel-17.0.12.0-150400.3.45.1

java-17-openjdk-headless-17.0.12.0-150400.3.45.1

java-17-openjdk-javadoc-17.0.12.0-150400.3.45.1

java-17-openjdk-jmods-17.0.12.0-150400.3.45.1

java-17-openjdk-src-17.0.12.0-150400.3.45.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20242628-1/
Link for SUSE-SU-2024:2628-1
https://lists.suse.com/pipermail/sle-security-updates/2024-July/019046.html
E-Mail link for SUSE-SU-2024:2628-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1227298
SUSE Bug 1227298
https://bugzilla.suse.com/1228046
SUSE Bug 1228046
https://bugzilla.suse.com/1228047
SUSE Bug 1228047
https://bugzilla.suse.com/1228048
SUSE Bug 1228048
https://bugzilla.suse.com/1228051
SUSE Bug 1228051
https://bugzilla.suse.com/1228052
SUSE Bug 1228052
https://www.suse.com/security/cve/CVE-2024-21131/
SUSE CVE CVE-2024-21131 page
https://www.suse.com/security/cve/CVE-2024-21138/
SUSE CVE CVE-2024-21138 page
https://www.suse.com/security/cve/CVE-2024-21140/
SUSE CVE CVE-2024-21140 page
https://www.suse.com/security/cve/CVE-2024-21145/
SUSE CVE CVE-2024-21145 page
https://www.suse.com/security/cve/CVE-2024-21147/
SUSE CVE CVE-2024-21147 page

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:17:java-17-openjdk-17.0.12.0-150400.3.45.1

Container bci/openjdk-devel:17:java-17-openjdk-devel-17.0.12.0-150400.3.45.1

Container bci/openjdk-devel:17:java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container bci/openjdk:17:java-17-openjdk-17.0.12.0-150400.3.45.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21131.html
CVE-2024-21131
https://bugzilla.suse.com/1228046
SUSE Bug 1228046

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:17:java-17-openjdk-17.0.12.0-150400.3.45.1

Container bci/openjdk-devel:17:java-17-openjdk-devel-17.0.12.0-150400.3.45.1

Container bci/openjdk-devel:17:java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container bci/openjdk:17:java-17-openjdk-17.0.12.0-150400.3.45.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21138.html
CVE-2024-21138
https://bugzilla.suse.com/1228047
SUSE Bug 1228047

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:17:java-17-openjdk-17.0.12.0-150400.3.45.1

Container bci/openjdk-devel:17:java-17-openjdk-devel-17.0.12.0-150400.3.45.1

Container bci/openjdk-devel:17:java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container bci/openjdk:17:java-17-openjdk-17.0.12.0-150400.3.45.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21140.html
CVE-2024-21140
https://bugzilla.suse.com/1228048
SUSE Bug 1228048

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:17:java-17-openjdk-17.0.12.0-150400.3.45.1

Container bci/openjdk-devel:17:java-17-openjdk-devel-17.0.12.0-150400.3.45.1

Container bci/openjdk-devel:17:java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container bci/openjdk:17:java-17-openjdk-17.0.12.0-150400.3.45.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21145.html
CVE-2024-21145
https://bugzilla.suse.com/1228051
SUSE Bug 1228051

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:17:java-17-openjdk-17.0.12.0-150400.3.45.1

Container bci/openjdk-devel:17:java-17-openjdk-devel-17.0.12.0-150400.3.45.1

Container bci/openjdk-devel:17:java-17-openjdk-headless-17.0.12.0-150400.3.45.1

Container bci/openjdk:17:java-17-openjdk-17.0.12.0-150400.3.45.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21147.html
CVE-2024-21147
https://bugzilla.suse.com/1228052
SUSE Bug 1228052

SUSE-SU-2024:2628-1

Описание

Список пакетов

Container bci/openjdk-devel:17

Container bci/openjdk:17

Container containers/apache-tomcat:10.1-openjdk17

Container containers/apache-tomcat:9-openjdk17

Container suse/manager/5.0/x86_64/server:latest

Container suse/multi-linux-manager/5.1/x86_64/server-attestation:latest

Container suse/multi-linux-manager/5.1/x86_64/server:latest

Image server-attestation-image

Image server-image

Image server-image-sles15sp7

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Basesystem 15 SP6

SUSE Linux Enterprise Module for Legacy 15 SP6

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Manager Proxy 4.3

SUSE Manager Server 4.3

openSUSE Leap 15.5

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2024-21131

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-21138

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-21140

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-21145

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-21147

Описание

Затронутые продукты

Ссылки