File _patchinfo of Package patchinfo.37384
<patchinfo incident="37384">
<issue tracker="cve" id="2024-21235"/>
<issue tracker="cve" id="2024-21217"/>
<issue tracker="cve" id="2024-21210"/>
<issue tracker="cve" id="2024-21208"/>
<issue tracker="bnc" id="1231719">VUL-0: CVE-2024-21235: java-*-openjdk,java-*-ibm: unauthorized read/write access to data in component Hotspot</issue>
<issue tracker="bnc" id="1231716">VUL-0: CVE-2024-21217: java-*-openjdk,java-*-ibm: partial DoS in component Serialization</issue>
<issue tracker="bnc" id="1231711">VUL-0: CVE-2024-21210: java-*-openjdk,java-*-ibm: component: Hotspot</issue>
<issue tracker="bnc" id="1231702">VUL-0: CVE-2024-21208: java-*-openjdk,java-*-ibm: component: Networking</issue>
<packager>fstrba</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for java-1_8_0-openj9</summary>
<description>This update for java-1_8_0-openj9 fixes the following issues:
Update to OpenJDK 8u442 build 06 with OpenJ9 0.49.0 virtual machine.
- CVE-2024-21235: unauthorized read/write access to data through the Hotspot component. (bsc#1231719)
- CVE-2024-21217: partial denial-of-service through the Serialization component. (bsc#1231716)
- CVE-2024-21210: unauthorized read/write access to data through the Hotspot component. (bsc#1231711)
- CVE-2024-21208: partial denial-of-service through the Networking component. (bsc#1231702)
</description>
</patchinfo>