Release Info

Advisory: CLSA-2025:1752655009

OS: AlmaLinux 9.2 ESU

Public date: 2025-07-16 08:36:52

Project: java-1.8.0-openjdk

Version: 1.8.0.402.b06-3.tuxcare.els1.el9

Errata link: https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1752655009.html

Changelog

- CVE-2024-20952: remote data access or modification in sandboxed clients - CVE-2024-20932: modify or access sensitive data in sandboxed client environments - CVE-2024-20918: remote data access or modification in sandboxed clients - CVE-2024-20926: remote data access in sandboxed clients - CVE-2024-20945: low-privileged users can access sensitive data - CVE-2024-20921: emote data access via exposed APIs in sandboxed clients - CVE-2024-20919: modify critical data via exposed APIs

Update

Update command: dnf update java-1.8.0-openjdk*

Packages list

java-1.8.0-openjdk-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-demo-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-demo-fastdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-demo-slowdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-devel-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-devel-fastdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-devel-slowdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-fastdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-headless-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-headless-fastdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-headless-slowdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-javadoc-1.8.0.402.b06-3.tuxcare.els1.el9.noarch.rpm java-1.8.0-openjdk-javadoc-zip-1.8.0.402.b06-3.tuxcare.els1.el9.noarch.rpm java-1.8.0-openjdk-slowdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-src-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-src-fastdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm java-1.8.0-openjdk-src-slowdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm

CVEs

CVE-2024-20919
CVE-2024-20945
CVE-2024-20918
CVE-2024-20926
CVE-2024-20952
CVE-2024-20932
CVE-2024-20921