SUSE-SU-2024:2629-1

Опубликовано: 30 июл. 2024

Источник: suse-cvrf

Описание

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues:

Updated to version 11.0.24+8 (July 2024 CPU):

CVE-2024-21131: Fixed a potential UTF8 size overflow (bsc#1228046).
CVE-2024-21138: Fixed an infinite loop due to excessive symbol length (bsc#1228047).
CVE-2024-21140: Fixed a pre-loop limit overflow in Range Check Elimination (bsc#1228048).
CVE-2024-21147: Fixed an out-of-bounds access in 2D image handling (bsc#1228052).
CVE-2024-21145: Fixed an index overflow in RangeCheckElimination (bsc#1228051).
CVE-2024-21144: Fixed an excessive loading time in Pack200 due to improper header validation (bsc#1228050).

Список пакетов

Container bci/openjdk-devel:11

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Container bci/openjdk:11

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Container containers/apache-tomcat:10.1-openjdk11

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Container containers/apache-tomcat:9-openjdk11

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Container suse/manager/5.0/x86_64/server-attestation:latest

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Image SLES15-SP4-Manager-Server-4-3

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Enterprise Storage 7.1

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise Module for Legacy 15 SP6

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise Module for Package Hub 15 SP5

java-11-openjdk-javadoc-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise Module for Package Hub 15 SP6

java-11-openjdk-javadoc-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise Server 15 SP2-LTSS

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise Server 15 SP3-LTSS

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise Server 15 SP4-LTSS

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Manager Proxy 4.3

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

SUSE Manager Server 4.3

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

openSUSE Leap 15.5

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

java-11-openjdk-javadoc-11.0.24.0-150000.3.116.1

java-11-openjdk-jmods-11.0.24.0-150000.3.116.1

java-11-openjdk-src-11.0.24.0-150000.3.116.1

openSUSE Leap 15.6

java-11-openjdk-11.0.24.0-150000.3.116.1

java-11-openjdk-demo-11.0.24.0-150000.3.116.1

java-11-openjdk-devel-11.0.24.0-150000.3.116.1

java-11-openjdk-headless-11.0.24.0-150000.3.116.1

java-11-openjdk-javadoc-11.0.24.0-150000.3.116.1

java-11-openjdk-jmods-11.0.24.0-150000.3.116.1

java-11-openjdk-src-11.0.24.0-150000.3.116.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20242629-1/
Link for SUSE-SU-2024:2629-1
https://lists.suse.com/pipermail/sle-security-updates/2024-July/019045.html
E-Mail link for SUSE-SU-2024:2629-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1227298
SUSE Bug 1227298
https://bugzilla.suse.com/1228046
SUSE Bug 1228046
https://bugzilla.suse.com/1228047
SUSE Bug 1228047
https://bugzilla.suse.com/1228048
SUSE Bug 1228048
https://bugzilla.suse.com/1228050
SUSE Bug 1228050
https://bugzilla.suse.com/1228051
SUSE Bug 1228051
https://bugzilla.suse.com/1228052
SUSE Bug 1228052
https://www.suse.com/security/cve/CVE-2024-21131/
SUSE CVE CVE-2024-21131 page
https://www.suse.com/security/cve/CVE-2024-21138/
SUSE CVE CVE-2024-21138 page
https://www.suse.com/security/cve/CVE-2024-21140/
SUSE CVE CVE-2024-21140 page
https://www.suse.com/security/cve/CVE-2024-21144/
SUSE CVE CVE-2024-21144 page
https://www.suse.com/security/cve/CVE-2024-21145/
SUSE CVE CVE-2024-21145 page
https://www.suse.com/security/cve/CVE-2024-21147/
SUSE CVE CVE-2024-21147 page

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-devel-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Container bci/openjdk:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21131.html
CVE-2024-21131
https://bugzilla.suse.com/1228046
SUSE Bug 1228046

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-devel-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Container bci/openjdk:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21138.html
CVE-2024-21138
https://bugzilla.suse.com/1228047
SUSE Bug 1228047

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-devel-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Container bci/openjdk:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21140.html
CVE-2024-21140
https://bugzilla.suse.com/1228048
SUSE Bug 1228048

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-devel-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Container bci/openjdk:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21144.html
CVE-2024-21144
https://bugzilla.suse.com/1228050
SUSE Bug 1228050

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-devel-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Container bci/openjdk:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21145.html
CVE-2024-21145
https://bugzilla.suse.com/1228051
SUSE Bug 1228051

Описание

unknown

Затронутые продукты

Container bci/openjdk-devel:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-devel-11.0.24.0-150000.3.116.1

Container bci/openjdk-devel:11:java-11-openjdk-headless-11.0.24.0-150000.3.116.1

Container bci/openjdk:11:java-11-openjdk-11.0.24.0-150000.3.116.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-21147.html
CVE-2024-21147
https://bugzilla.suse.com/1228052
SUSE Bug 1228052

SUSE-SU-2024:2629-1

Описание

Список пакетов

Container bci/openjdk-devel:11

Container bci/openjdk:11

Container containers/apache-tomcat:10.1-openjdk11

Container containers/apache-tomcat:9-openjdk11

Container suse/manager/5.0/x86_64/server-attestation:latest

Image SLES15-SP4-Manager-Server-4-3

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

Image SLES15-SP4-Manager-Server-4-3-BYOS

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

Image SLES15-SP4-Manager-Server-4-3-EC2-llc

Image SLES15-SP4-Manager-Server-4-3-EC2-ltd

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Legacy 15 SP6

SUSE Linux Enterprise Module for Package Hub 15 SP5

SUSE Linux Enterprise Module for Package Hub 15 SP6

SUSE Linux Enterprise Server 15 SP2-LTSS

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP2

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Manager Proxy 4.3

SUSE Manager Server 4.3

openSUSE Leap 15.5

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2024-21131

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-21138

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-21140

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-21144

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-21145

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-21147

Описание

Затронутые продукты

Ссылки