SUSE-SU-2024:3954-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20243954-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:3954-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:3954-1

Related

Published

2024-11-08T13:10:02Z

Modified

2024-11-08T13:10:02Z

Summary

Security update for java-21-openjdk

Details

This update for java-21-openjdk fixes the following issues:

Update to upstream tag jdk-21.0.5+13 (October 2024 CPU)
- Security fixes
  - JDK-8307383: Enhance DTLS connections
  - JDK-8311208: Improve CDS Support
  - JDK-8328286, CVE-2024-21208, bsc#1231702: Enhance HTTP client
  - JDK-8328544, CVE-2024-21210, bsc#1231711: Improve handling of vectorization
  - JDK-8328726: Better Kerberos support
  - JDK-8331446, CVE-2024-21217, bsc#1231716: Improve deserialization support
  - JDK-8332644, CVE-2024-21235, bsc#1231719: Improve graph optimizations
  - JDK-8335713: Enhance vectorization analysis
- Other changes
  - JDK-6355567: AdobeMarkerSegment causes failure to read valid JPEG
  - JDK-6967482: TAB-key does not work in JTables after selecting details-view in JFileChooser
  - JDK-7022325: TESTBUG: test/java/util/zip/ZipFile/ /ReadLongZipFileName.java leaks files if it fails
  - JDK-8073061: (fs) Files.copy(foo, bar, REPLACEEXISTING) deletes bar even if foo is not readable
  - JDK-8166352: FilePane.createDetailsView() removes JTable TAB, SHIFT-TAB functionality
  - JDK-8170817: G1: Returning MinTLABSize from unsafemaxtlaballoc causes TLAB flapping
  - JDK-8301686: TLS 1.3 handshake fails if servername doesn't match resuming session
  - JDK-8303920: Avoid calling out to python in DataDescriptorSignatureMissing test
  - JDK-8305072: Win32ShellFolder2.compareTo is inconsistent
  - JDK-8305825: getBounds API returns wrong value resulting in multiple Regression Test Failures on Ubuntu 23.04
  - JDK-8307193: Several Swing jtreg tests use class.forName on L&F classes
  - JDK-8307352: AARCH64: Improve itablestub
  - JDK-8309067: gtest/AsyncLogGtest.java fails again in stderrOutputvm
  - JDK-8309621: [XWayland][Screencast] screen capture failure with sun.java2d.uiScale other than 1
  - JDK-8309685: Fix -Wconversion warnings in assembler and register code
  - JDK-8309894: compiler/vectorapi/ /VectorLogicalOpIdentityTest.java fails on SVE system with UseSVE=0
  - JDK-8310072: JComboBox/DisabledComboBoxFontTestAuto: Enabled and disabled ComboBox does not match in these LAFs: GTK+
  - JDK-8310108: Skip ReplaceCriticalClassesForSubgraphs when EnableJVMCI is specified
  - JDK-8310201: Reduce verbose locale output in -XshowSettings launcher option
  - JDK-8310334: [XWayland][Screencast] screen capture error message in debug
  - JDK-8310628: GcInfoBuilder.c missing JNI Exception checks
  - JDK-8310683: Refactor StandardCharset/standard.java to use JUnit
  - JDK-8310906: Fix -Wconversion warnings in runtime, oops and some code header files.
  - JDK-8311306: Test com/sun/management/ThreadMXBean/ /ThreadCpuTimeArray.java failed: out of expected range
  - JDK-8311666: Disabled tests in test/jdk/sun/java2d/marlin
  - JDK-8311989: Test java/lang/Thread/virtual/Reflection.java timed out
  - JDK-8312049: runtime/logging/ClassLoadUnloadTest can be improved
  - JDK-8312111: open/test/jdk/java/awt/Robot/ModifierRobotKey/ /ModifierRobotKeyTest.java fails on ubuntu 23.04
  - JDK-8312140: jdk/jshell tests failed with JDI socket timeouts
  - JDK-8312200: Fix Parse::catchcallexceptions memory leak
  - JDK-8312229: Crash involving yield, switch and anonymous classes
  - JDK-8313674: (fc) java/nio/channels/FileChannel/ /BlockDeviceSize.java should test for more block devices
  - JDK-8313697: [XWayland][Screencast] consequent getPixelColor calls are slow
  - JDK-8313983: jmod create --target-platform should replace existing ModuleTarget attribute
  - JDK-8314163: os::printhexdump prints incorrectly for big endian platforms and unit sizes larger than 1
  - JDK-8314225: SIGSEGV in JavaThread::islockowned
  - JDK-8314515: java/util/concurrent/SynchronousQueue/ /Fairness.java failed with 'Error: fair=false i=8 j=0'
  - JDK-8314614: jdk/jshell/ImportTest.java failed with 'InternalError: Failed remote listen'
  - JDK-8315024: Vector API FP reduction tests should not test for exact equality
  - JDK-8315031: YoungPLABSize and OldPLABSize not aligned by ObjectAlignmentInBytes
  - JDK-8315422: getSoTimeout() would be in try block in SSLSocketImpl
  - JDK-8315505: CompileTask timestamp printed can overflow
  - JDK-8315576: compiler/codecache/CodeCacheFullCountTest.java fails after JDK-8314837
  - JDK-8315804: Open source several Swing JTabbedPane JTextArea JTextField tests
  - JDK-8315923: pretouchmemory by atomic-add-0 fragments huge pages unexpectedly
  - JDK-8316756: C2 EA fails with 'missing memory path' when encountering unsafearraycopy stub call
  - JDK-8317112: Add screenshot for Frame/DefaultSizeTest.java
  - JDK-8317128: java/nio/file/Files/CopyAndMove.java failed with AccessDeniedException
  - JDK-8317240: Promptly free OopMapEntry after fail to insert the entry to OopMapCache
  - JDK-8317288: [macos] java/awt/Window/Grab/GrabTest.java: Press on the outside area didn't cause ungrab
  - JDK-8317299: safepoint scalarization doesn't keep track of the depth of the JVM state
  - JDK-8317360: Missing null checks in JfrCheckpointManager and JfrStringPool initialization routines
  - JDK-8317372: Refactor some NumberFormat tests to use JUnit
  - JDK-8317446: ProblemList gc/arguments/TestNewSizeFlags.java on macosx-aarch64 in Xcomp
  - JDK-8317449: ProblemList serviceability/jvmti/stress/ /StackTrace/NotSuspended/ /GetStackTraceNotSuspendedStressTest.java on several platforms
  - JDK-8317635: Improve GetClassFields test to verify correctness of field order
  - JDK-8317696: Fix compilation with clang-16
  - JDK-8317738: CodeCacheFullCountTest failed with 'VirtualMachineError: Out of space in CodeCache for method handle intrinsic'
  - JDK-8317831: compiler/codecache/CheckLargePages.java fails on OL 8.8 with unexpected memory string
  - JDK-8318071: IgnoreUnrecognizedVMOptions flag still causes failure in ArchiveHeapTestClass
  - JDK-8318479: [jmh] the test security.CacheBench failed for multiple threads run
  - JDK-8318605: Enable parallelism in vmTestbase/nsk/stress/stack tests
  - JDK-8319197: Exclude hb-subset and hb-style from compilation
  - JDK-8319406: x86: Shorter movptr(reg, imm) for 32-bit immediates
  - JDK-8319773: Avoid inflating monitors when installing hash codes for LMLIGHTWEIGHT
  - JDK-8321278: C2: Partial peeling fails with assert 'lastpeel <- firstnotpeeled'
  - JDK-8321509: False positive in gettrampoline fast path causes crash
  - JDK-8322996: BoxLockNode creation fails with assert(reg < CHUNKSIZE) failed: sanity
  - JDK-8323122: AArch64: Increase itable stub size estimate
  - JDK-8323196: jdk/jfr/api/consumer/filestream/TestOrdered.java failed with 'Events are not ordered! Reuse = false'
  - JDK-8323274: C2: array load may float above range check
  - JDK-8323552: AbstractMemorySegmentImpl#mismatch returns -1 when comparing distinct areas of the same instance of MemorySegment
  - JDK-8323577: C2 SuperWord: remove AlignVector restrictions on IR tests added in JDK-8305055
  - JDK-8323584: AArch64: Unnecessary ResourceMark in NativeCall::setdestinationmtsafe
  - JDK-8323972: C2 compilation fails with assert(!x->asLoop()->isloopnestinnerloop()) failed: loop was transformed
  - JDK-8324174: assert(m->isentered(current)) failed: invariant
  - JDK-8324983: Race in CompileBroker::possiblyaddcompilerthreads
  - JDK-8325022: Incorrect error message on client authentication
  - JDK-8325037: x86: enable and fix hotspot/jtreg/compiler/vectorization/TestRoundVectFloat.java
  - JDK-8325083: jdk/incubator/vector/Double512VectorTests.java crashes in Assembler::vexprefixandencode
  - JDK-8332935: Crash: assert(lastPtr != 0) failed: Mismatched JNINativeInterface tables, check for new entries
  - JDK-8332936: Test vmTestbase/metaspace/gc/watermark7080/ /TestDescription.java fails with no GC's recorded
  - JDK-8332959: C2: ZGC fails with 'Incorrect load shift' when invoking Object.clone() reflectively on an array
  - JDK-8333088: ubsan: shenandoahAdaptiveHeuristics.cpp:245:44: runtime error: division by zero
  - JDK-8333093: Incorrect comment in zAddressaarch64.cpp
  - JDK-8333099: Missing check for isLoadVector in StoreNode::Identity
  - JDK-8333149: ubsan : memset on nullptr target detected in jvmtiEnvBase.cpp getobjectmonitorusage
  - JDK-8333178: ubsan: jvmtitools.cpp:149:16: runtime error: null pointer passed as argument 2, which is declared to never be null
  - JDK-8333270: HandlersOnComplexResetUpdate and HandlersOnComplexUpdate tests fail with 'Unexpected reference' if timeoutFactor is less than 1/3
  - JDK-8333277: ubsan: mlibImageScanPoly.c:292:43: runtime error: division by zero
  - JDK-8333622: ubsan: relocInfox86.cpp:101:56: runtime error: pointer index expression with base (-1) overflowed
  - JDK-8333639: ubsan: cppVtables.cpp:81:55: runtime error: index 14 out of bounds for type 'long int [1]'
  - JDK-8333652: RISC-V: compiler/vectorapi/ /VectorGatherMaskFoldingTest.java fails when using RVV
  - JDK-8333716: Shenandoah: Check for disarmed method before taking the nmethod lock
  - JDK-8333724: Problem list security/infra/java/security/cert/ /CertPathValidator/certification/CAInterop.java #teliasonerarootcav1
  - JDK-8333804: java/net/httpclient/ForbiddenHeadTest.java threw an exception with 0 failures
  - JDK-8333887: ubsan: unsafe.cpp:247:13: runtime error: store to null pointer of type 'volatile int'
  - JDK-8334078: RISC-V: TestIntVect.java fails after JDK-8332153 when running without RVV
  - JDK-8334123: log the opening of Type 1 fonts
  - JDK-8334166: Enable binary check
  - JDK-8334239: Introduce macro for ubsan method/function exclusions
  - JDK-8334297: (so) java/nio/channels/SocketChannel/OpenLeak.java should not depend on SecurityManager
  - JDK-8334332: TestIOException.java fails if run by root
  - JDK-8334333: MissingResourceCauseTestRun.java fails if run by root
  - JDK-8334339: Test java/nio/file/attribute/ /BasicFileAttributeView/CreationTime.java fails on alinux3
  - JDK-8334418: Update IANA Language Subtag Registry to Version 2024-06-14
  - JDK-8334421: assert(!oldbox->isunbalanced()) failed: this should not be called for unbalanced region
  - JDK-8334769: Shenandoah: Move CodeCachelock close to its use in ShenandoahConcurrentNMethodIterator
  - JDK-8334867: Add back assertion from JDK-8325494
  - JDK-8335007: Inline OopMapCache table
  - JDK-8335134: Test com/sun/jdi/BreakpointOnClassPrepare.java timeout
  - JDK-8335150: Test LogGeneratedClassesTest.java fails on rpmbuild mock enviroment
  - JDK-8335237: ubsan: vtableStubs.hpp isvtablestub exclude from ubsan checks
  - JDK-8335283: Build failure due to 'nosanitize' attribute directive ignored
  - JDK-8338286: GHA: Demote x8632 to hotspot build only
  - JDK-8338696: (fs) BasicFileAttributes.creationTime() falls back to epoch if birth time is unavailable (Linux)
  - JDK-8339869: [21u] Test CreationTime.java fails with UnsatisfiedLinkError after 8334339
  - JDK-8341057: Add 2 SSL.com TLS roots
  - JDK-8341059: Change Entrust TLS distrust date to November 12, 2024
  - JDK-8341674: [21u] Remove designator DEFAULTPROMOTEDVERSION_PRE=ea for release 21.0.5
  - JDK-8341989: [21u] Back out JDK-8327501 and JDK-8328366

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP6 / java-21-openjdk

Package

Name: java-21-openjdk
Purl: purl:rpm/suse/java-21-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.0.5.0-150600.3.6.3

Ecosystem specific

{
    "binaries": [
        {
            "java-21-openjdk": "21.0.5.0-150600.3.6.3",
            "java-21-openjdk-demo": "21.0.5.0-150600.3.6.3",
            "java-21-openjdk-headless": "21.0.5.0-150600.3.6.3",
            "java-21-openjdk-devel": "21.0.5.0-150600.3.6.3"
        }
    ]
}

openSUSE:Leap 15.6 / java-21-openjdk

Package

Name: java-21-openjdk
Purl: purl:rpm/suse/java-21-openjdk&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

21.0.5.0-150600.3.6.3

Ecosystem specific

{
    "binaries": [
        {
            "java-21-openjdk": "21.0.5.0-150600.3.6.3",
            "java-21-openjdk-javadoc": "21.0.5.0-150600.3.6.3",
            "java-21-openjdk-demo": "21.0.5.0-150600.3.6.3",
            "java-21-openjdk-src": "21.0.5.0-150600.3.6.3",
            "java-21-openjdk-jmods": "21.0.5.0-150600.3.6.3",
            "java-21-openjdk-headless": "21.0.5.0-150600.3.6.3",
            "java-21-openjdk-devel": "21.0.5.0-150600.3.6.3"
        }
    ]
}