Security update for java-11-openjdk

2024-07-3007:11:50

Google

osv.dev

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

7.4

Confidence

High

This update for java-11-openjdk fixes the following issues:

Updated to version 11.0.24+8 (July 2024 CPU):

CVE-2024-21131: Fixed a potential UTF8 size overflow (bsc#1228046).
CVE-2024-21138: Fixed an infinite loop due to excessive symbol
length (bsc#1228047).
CVE-2024-21140: Fixed a pre-loop limit overflow in Range Check
Elimination (bsc#1228048).
CVE-2024-21147: Fixed an out-of-bounds access in 2D image handling
(bsc#1228052).
CVE-2024-21145: Fixed an index overflow in RangeCheckElimination
(bsc#1228051).
CVE-2024-21144: Fixed an excessive loading time in Pack200 due to
improper header validation (bsc#1228050).