CVE-2024-5971

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...

CVE-2024-5971 Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...

CVE-2024-5971 Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...

CVE-2024-5971

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...

OPENSUSE-SU-2024:13678-1 java-17-openj9-17.0.10.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12892-1 java-17-openjdk-17.0.7.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12262-1 java-17-openj9-17.0.4.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12432-1 java-17-openjdk-17.0.5.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12019-1 java-17-openjdk-17.0.3.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12669-1 java-17-openjdk-17.0.6.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13587-1 java-17-openjdk-17.0.10.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12464-1 java-17-openj9-17.0.5.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13872-1 java-17-openjdk-17.0.11.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.11.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12755-1 java-17-openj9-17.0.6.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

Updated java-1.8.0, java-11, java-17, java-latest packages fix security vulnerabilities

Long Exception message leading to crash. CVE-2024-21011 HTTP/2 client improper reverse DNS lookup. CVE-2024-21012 Integer overflow in C1 compiler address generation. CVE-2024-21068 Pack200 excessive memory allocation. CVE-2024-21085 C2 compilation fails with "Exceeded noderegs array". CVE-2024-21...

SUSE: Security Advisory (SUSE-SU-2024:1499-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : java-17-amazon-corretto (ALAS-2024-2528)

The version of java-17-amazon-corretto installed on the remote host is prior to 17.0.11+9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2528 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2024-1825)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1825 advisory. 17.0.11.0.9-2.0.1 - Add Oracle vendor bug URL 1:17.0.11.0.9-2 - Update to jdk-17.0.11+9 GA - Add openjdk-17.0.11+9.tar.xz to .gitignore - Sync...

Moderate: java-17-openjdk security update

The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixes: OpenJDK: long Exception message leading to crash 8319851 CVE-2024-21011 OpenJDK: integer overflow in C1 compiler address generation 8322122 CVE-2024-21068...

Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to unspecified vulnerabilities and sensitive information exposure due to IBM Runtime Environment Java Technology Edition Version 17

Summary IBM Java 17 is used by IBM Sterling Connect:Direct for UNIX in product configuration and management. IBM Sterling Connect:Direct for UNIX is impacted by unspecified vulnerabilities and sensitive information exposure due to IBM Java 17. IBM Sterling Connect:Direct for UNIX has upgraded IBM...