Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u442 build 06 with OpenJ9 0.49.0 virtual machine. - CVE-2024-21235: unauthorized read/write access to data through the Hotspot component. (bsc#1231719) - CVE-2024-21217: partial denial-of-service through the Serialization component. (bsc#1231716) - CVE-2024-21210: unauthorized read/write access to data through the Hotspot component. (bsc#1231711) - CVE-2024-21208: partial denial-of-service through the Networking component. (bsc#1231702)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u442 build 06 with OpenJ9 0.49.0 virtual machine. - CVE-2024-21235: unauthorized read/write access to data through the Hotspot component. (bsc#1231719) - CVE-2024-21217: partial denial-of-service through the Serialization component. (bsc#1231716) - CVE-2024-21210: unauthorized read/write access to data through the Hotspot component. (bsc#1231711) - CVE-2024-21208: partial denial-of-service through the Networking component. (bsc#1231702)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1231702
- https://bugzilla.suse.com/1231711
- https://bugzilla.suse.com/1231716
- https://bugzilla.suse.com/1231719
- https://www.suse.com/security/cve/CVE-2024-21208
- https://www.suse.com/security/cve/CVE-2024-21210
- https://www.suse.com/security/cve/CVE-2024-21217
- https://www.suse.com/security/cve/CVE-2024-21235
- https://www.suse.com/support/update/announcement/2025/suse-su-20250435-1/