ALSA-2024:1818

Source

https://errata.almalinux.org/9/ALSA-2024-1818.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:1818.json

Related

• CVE-2024-21011
• CVE-2024-21068
• CVE-2024-21085
• CVE-2024-21094

Published

2024-04-18T00:00:00Z

Modified

2024-04-19T13:00:41Z

Details

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

• OpenJDK: long Exception message leading to crash (8319851) (CVE-2024-21011)
• OpenJDK: integer overflow in C1 compiler address generation (8322122) (CVE-2024-21068)
• OpenJDK: Pack200 excessive memory allocation (8322114) (CVE-2024-21085)
• OpenJDK: C2 compilation fails with "Exceeded noderegs array" (8317507) (CVE-2024-21094)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

• https://access.redhat.com/errata/RHSA-2024:1818
• https://access.redhat.com/security/cve/CVE-2024-21011
• https://access.redhat.com/security/cve/CVE-2024-21068
• https://access.redhat.com/security/cve/CVE-2024-21085
• https://access.redhat.com/security/cve/CVE-2024-21094
• https://bugzilla.redhat.com/2274977
• https://bugzilla.redhat.com/2275001
• https://bugzilla.redhat.com/2275003
• https://bugzilla.redhat.com/2275005
• https://errata.almalinux.org/9/ALSA-2024-1818.html