Advisory: CLSA-2024:1724259788
OS: CentOS 8.5 ELS
Public date: 2024-08-21 13:03:11
Project: java-1.8.0-openjdk
Version: 1.8.0.422.b05-1.el8.tuxcare.els1
Errata link: https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2024-1724259788.html
- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u422-b05. That fixes following CVEs: - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: Infinite loop vunlerability in SymbolTable - CVE-2024-21140: Int overflow/underflow in Range Check Elimination (RCE) - CVE-2024-21144: Invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: Out-of-bounds access in MaskFill - CVE-2024-21147: Out-of-bounds array index in Range Check Elimination (RCE)
Update command: dnf update java-1.8.0-openjdk*
java-1.8.0-openjdk-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-accessibility-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-accessibility-fastdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-accessibility-slowdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-demo-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-demo-fastdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-demo-slowdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-devel-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-devel-fastdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-devel-slowdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-fastdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-headless-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-headless-fastdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-headless-slowdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-javadoc-1.8.0.422.b05-1.el8.tuxcare.els1.noarch.rpm java-1.8.0-openjdk-javadoc-zip-1.8.0.422.b05-1.el8.tuxcare.els1.noarch.rpm java-1.8.0-openjdk-slowdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-src-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-src-fastdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm java-1.8.0-openjdk-src-slowdebug-1.8.0.422.b05-1.el8.tuxcare.els1.x86_64.rpm