Release Info

Advisory: CLSA-2024:1711648823

OS: Ubuntu 18.04 ELS

Public date: 2024-03-28 14:00:25

Project: openjdk-8

Version: 8u402-ga-0ubuntu1~18.04+tuxcare.els1

Errata link: https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1711648823.html

Changelog

* OpenJDK 8u402 release, build 6. - CVE-2024-20918, CVE-2024-20919, CVE-2024-20921: Unauthorized access in Hotspot. - CVE-2024-20926: Unauthorized access in Scripting. - CVE-2024-20945, CVE-2024-20952: Unauthorized access in Security. - Release notes: https://mail.openjdk.org/pipermail/jdk8u-dev/2024-January/017883.html

Update

Update command: apt-get update apt-get --only-upgrade install openjdk-8*

Packages list

openjdk-8-demo_8u402-ga-0ubuntu1~18.04+tuxcare.els1_amd64.deb openjdk-8-doc_8u402-ga-0ubuntu1~18.04+tuxcare.els1_all.deb openjdk-8-jdk_8u402-ga-0ubuntu1~18.04+tuxcare.els1_amd64.deb openjdk-8-jdk-headless_8u402-ga-0ubuntu1~18.04+tuxcare.els1_amd64.deb openjdk-8-jre_8u402-ga-0ubuntu1~18.04+tuxcare.els1_amd64.deb openjdk-8-jre-headless_8u402-ga-0ubuntu1~18.04+tuxcare.els1_amd64.deb openjdk-8-jre-zero_8u402-ga-0ubuntu1~18.04+tuxcare.els1_amd64.deb openjdk-8-source_8u402-ga-0ubuntu1~18.04+tuxcare.els1_all.deb

CVEs

CVE-2024-20918
CVE-2024-20926
CVE-2024-20945
CVE-2024-20919
CVE-2024-20921
CVE-2024-20952