950 matches found
DLA-4001-1 libxstream-java - security update
Bulletin has no description...
SUSE-SU-2024:4306-1 Security update for java-1_8_0-ibm
This update for java-180-ibm fixes the following issues: Updated to Java 8.0 Service Refresh 8 Fix Pack 35 with Oracle October 15 2024 CPU bsc1232064: - CVE-2024-21208: Fixed partial DoS in component Networking bsc1231702,JDK-8328286 - CVE-2024-21210: Fixed unauthorized update, insert or delete...
RHSA-2024:10926 Red Hat Security Advisory: java-1.8.0-ibm security update
Bulletin has no description...
USN-7139-1: Apache Shiro vulnerability
It was discovered that Apache Shiro used a static cipher within the "Remember Me" feature inside authentication by default. An attacker could possibly use this issue to achieve remote code execution or obtain sensitive information...
java-17-openjdk-17.0.13.0-1.1 on GA media (moderate)
java-17-openjdk-17.0.13.0-1.1 on GA media Announcement ID: openSUSE-SU-2024:14448-1 Rating: moderate Cross-References: CVE-2024-21208 CVE-2024-21210 CVE-2024-21217 CVE-2024-21235 CVSS scores: CVE-2024-21208 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2024-21208 SUSE : 6.3...
Amazon Linux 2023 : java-1.8.0-amazon-corretto, java-1.8.0-amazon-corretto-devel (ALAS2023-2024-754)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-754 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle...
JDK: Integer conversion error leads to incorrect range check (8332644)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracl...
EUVD-2024-2974
pac4j is a security framework for Java. pac4j-core prior to version 4.0.0 is affected by a Java deserialization vulnerability. The vulnerability affects systems that store externally controlled values in attributes of the UserProfile class from pac4j-core. It can be exploited by providing an...
RHSA-2009:1199 Red Hat Security Advisory: java-1.5.0-sun security update
Bulletin has no description...
Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, & java-latest-openjdk packages fix security vulnerabilities
Potential UTF8 size overflow. CVE-2024-21131 Excessive symbol length can lead to infinite loop. CVE-2024-21138 Range Check Elimination RCE pre-loop limit overflow. CVE-2024-21140 Pack200 increase loading time due to improper header validation. CVE-2024-21144 Out-of-bounds access in 2D image...
RHSA-2018:1204 Red Hat Security Advisory: java-1.8.0-oracle security update
Bulletin has no description...
RHSA-2018:1203 Red Hat Security Advisory: java-1.6.0-sun security update
Bulletin has no description...
RHSA-2017:3267 Red Hat Security Advisory: java-1.8.0-ibm security update
Bulletin has no description...
RHSA-2017:3453 Red Hat Security Advisory: java-1.8.0-ibm security update
Bulletin has no description...
RHSA-2017:3047 Red Hat Security Advisory: java-1.6.0-sun security update
Bulletin has no description...
RHSA-2017:3046 Red Hat Security Advisory: java-1.7.0-oracle security update
Bulletin has no description...
RHSA-2017:2998 Red Hat Security Advisory: java-1.8.0-openjdk security update
Bulletin has no description...
RHSA-2017:1792 Red Hat Security Advisory: java-1.6.0-sun security update
Bulletin has no description...