Updated java-1.8.0, java-11, java-17, java-latest packages fix security vulnerabilities

2024-05-1620:29:32

Gentoo Foundation

advisories.mageia.org

java-1.8.0

java-11

java-17

security vulnerabilities

http/2

integer overflow

memory allocation

c2 compilation

unix

CVSS3

3.7

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

20.6%

JSON

Long Exception message leading to crash. (CVE-2024-21011) HTTP/2 client improper reverse DNS lookup. (CVE-2024-21012) Integer overflow in C1 compiler address generation. (CVE-2024-21068) Pack200 excessive memory allocation. (CVE-2024-21085) C2 compilation fails with “Exceeded _node_regs array”. (CVE-2024-21094)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchjava< 1.8.0-openjdk-1.8.0.412.b08-1java-1.8.0-openjdk-1.8.0.412.b08-1.mga9
Mageia9noarchjava< 11-openjdk-11.0.23.0.9-1java-11-openjdk-11.0.23.0.9-1.mga9
Mageia9noarchjava< 17-openjdk-17.0.11.0.9-1java-17-openjdk-17.0.11.0.9-1.mga9
Mageia9noarchjava-latest-openjdk< 22.0.1.0.8-1.rolling.1java-latest-openjdk-22.0.1.0.8-1.rolling.1.mga9

OS	Version	Architecture	Package	Version	Filename
Mageia	9	noarch	java	< 1.8.0-openjdk-1.8.0.412.b08-1	java-1.8.0-openjdk-1.8.0.412.b08-1.mga9
Mageia	9	noarch	java	< 11-openjdk-11.0.23.0.9-1	java-11-openjdk-11.0.23.0.9-1.mga9
Mageia	9	noarch	java	< 17-openjdk-17.0.11.0.9-1	java-17-openjdk-17.0.11.0.9-1.mga9
Mageia	9	noarch	java-latest-openjdk	< 22.0.1.0.8-1.rolling.1	java-latest-openjdk-22.0.1.0.8-1.rolling.1.mga9