Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 30 (bsc#1228346) - CVE-2024-21147: Fixed an array index overflow in RangeCheckElimination. (bsc#1228052) - CVE-2024-21145: Fixed an out-of-bounds access in 2D image handling. (bsc#1228051) - CVE-2024-21140: Fixed a range check elimination pre-loop limit overflow. (bsc#1228048) - CVE-2024-21144: Pack200 increase loading time due to improper header validation. (bsc#1228050) - CVE-2024-21138: Fixed an issue where excessive symbol length can lead to infinite loop. (bsc#1228047) - CVE-2024-21131: Fixed a potential UTF8 size overflow. (bsc#1228046) - CVE-2024-27267: Fixed an Object Request Broker (ORB) remote denial of service. (bsc#1229224)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 30 (bsc#1228346) - CVE-2024-21147: Fixed an array index overflow in RangeCheckElimination. (bsc#1228052) - CVE-2024-21145: Fixed an out-of-bounds access in 2D image handling. (bsc#1228051) - CVE-2024-21140: Fixed a range check elimination pre-loop limit overflow. (bsc#1228048) - CVE-2024-21144: Pack200 increase loading time due to improper header validation. (bsc#1228050) - CVE-2024-21138: Fixed an issue where excessive symbol length can lead to infinite loop. (bsc#1228047) - CVE-2024-21131: Fixed a potential UTF8 size overflow. (bsc#1228046) - CVE-2024-27267: Fixed an Object Request Broker (ORB) remote denial of service. (bsc#1229224)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1228046
- https://bugzilla.suse.com/1228047
- https://bugzilla.suse.com/1228048
- https://bugzilla.suse.com/1228050
- https://bugzilla.suse.com/1228051
- https://bugzilla.suse.com/1228052
- https://bugzilla.suse.com/1228346
- https://bugzilla.suse.com/1229224
- https://www.suse.com/security/cve/CVE-2024-21131
- https://www.suse.com/security/cve/CVE-2024-21138
- https://www.suse.com/security/cve/CVE-2024-21140
- https://www.suse.com/security/cve/CVE-2024-21144
- https://www.suse.com/security/cve/CVE-2024-21145
- https://www.suse.com/security/cve/CVE-2024-21147
- https://www.suse.com/security/cve/CVE-2024-27267
- https://www.suse.com/support/update/announcement/2024/suse-su-20243183-1/