Описание
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues:
- Update to Java 8.0 Service Refresh 8 Fix Pack 30 (bsc#1228346)
- CVE-2024-21147: Fixed an array index overflow in RangeCheckElimination. (bsc#1228052)
- CVE-2024-21145: Fixed an out-of-bounds access in 2D image handling. (bsc#1228051)
- CVE-2024-21140: Fixed a range check elimination pre-loop limit overflow. (bsc#1228048)
- CVE-2024-21144: Pack200 increase loading time due to improper header validation. (bsc#1228050)
- CVE-2024-21138: Fixed an issue where excessive symbol length can lead to infinite loop. (bsc#1228047)
- CVE-2024-21131: Fixed a potential UTF8 size overflow. (bsc#1228046)
- CVE-2024-27267: Fixed an Object Request Broker (ORB) remote denial of service. (bsc#1229224)
Список пакетов
SUSE Linux Enterprise Server 12 SP5
java-1_8_0-ibm-1.8.0_sr8.30-30.126.1
java-1_8_0-ibm-alsa-1.8.0_sr8.30-30.126.1
java-1_8_0-ibm-devel-1.8.0_sr8.30-30.126.1
java-1_8_0-ibm-plugin-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
java-1_8_0-ibm-1.8.0_sr8.30-30.126.1
java-1_8_0-ibm-alsa-1.8.0_sr8.30-30.126.1
java-1_8_0-ibm-devel-1.8.0_sr8.30-30.126.1
java-1_8_0-ibm-plugin-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Software Development Kit 12 SP5
java-1_8_0-ibm-devel-1.8.0_sr8.30-30.126.1
Ссылки
- Link for SUSE-SU-2024:3183-1
- E-Mail link for SUSE-SU-2024:3183-1
- SUSE Security Ratings
- SUSE Bug 1228046
- SUSE Bug 1228047
- SUSE Bug 1228048
- SUSE Bug 1228050
- SUSE Bug 1228051
- SUSE Bug 1228052
- SUSE Bug 1228346
- SUSE Bug 1229224
- SUSE CVE CVE-2024-21131 page
- SUSE CVE CVE-2024-21138 page
- SUSE CVE CVE-2024-21140 page
- SUSE CVE CVE-2024-21144 page
- SUSE CVE CVE-2024-21145 page
- SUSE CVE CVE-2024-21147 page
- SUSE CVE CVE-2024-27267 page
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.30-30.126.1
Ссылки
- CVE-2024-21131
- SUSE Bug 1228046
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.30-30.126.1
Ссылки
- CVE-2024-21138
- SUSE Bug 1228047
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.30-30.126.1
Ссылки
- CVE-2024-21140
- SUSE Bug 1228048
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.30-30.126.1
Ссылки
- CVE-2024-21144
- SUSE Bug 1228050
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.30-30.126.1
Ссылки
- CVE-2024-21145
- SUSE Bug 1228051
Описание
unknown
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.30-30.126.1
Ссылки
- CVE-2024-21147
- SUSE Bug 1228052
Описание
The Object Request Broker (ORB) in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of service, caused by a race condition in the management of ORB listener threads.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-alsa-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-devel-1.8.0_sr8.30-30.126.1
SUSE Linux Enterprise Server 12 SP5:java-1_8_0-ibm-plugin-1.8.0_sr8.30-30.126.1
Ссылки
- CVE-2024-27267
- SUSE Bug 1229224