Improper input validation in Oracle Java SE - CVE-2024-21210

 

Improper input validation in Oracle Java SE - CVE-2024-21210

Published: October 15, 2024


Vulnerability identifier: #VU98645
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-21210
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The vulnerability exists due to improper input validation within the Hotspot component in Oracle Java SE. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.


Affected software

Oracle Java SE
OpenJDK Java (for Middleware)
IBM Java SDK
IBM CICS TX Advanced
IBM CICS TX Standard
IBM App Connect Enterprise
Storage Protect for Virtual Environments: Data Protection for VMware
APEX Cloud Platform for Microsoft Azure
Netezza Appliance
PowerVM NovaLink
Storage Scale
Communications Server for Linux
Tivoli Monitoring for Virtual Environments Agent for Linux Kernel-based Virtual Machines
Tivoli Monitoring for Virtual Environments Base
Storage Protect for Virtual Environments: Data Protection for Hyper-V
Storage Protect Backup-Archive Client
Storage Protect for Space Management
IBM OpenPages with Watson
Storage Virtualize
Integration Bus for z/OS
Cognos Transformer
Application Modernization Accelerator
Tivoli System Automation for Multiplatforms
IBM Cloud Pak for Watson AIOps
watsonx Assistant for IBM Cloud Pak for Data
watsonx Assistant Cartridge
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
IBM Secure External Authentication Server
Security Directory Integrator
Storage Protect Operations Center
CICS Transaction Gateway for Multiplatforms
CICS Transaction Gateway Desktop Edition
EMC Cloud Tiering Appliance
CloudBoost Virtual Appliance
Robotic Process Automation for Cloud Pak
Business Automation Insights
Debian Linux
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
Gentoo Linux
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
Anolis OS
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
SUSE Linux Enterprise Server 12 SP5 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Basesystem Module
Legacy Module
SUSE Package Hub 15
openSUSE Leap
Ubuntu
openEuler
SecurID Governance and Lifecycle
Cryostat
IBM Tivoli Business Service Manager
Communications Server for Linux on System z
Communications Server for Data Center Deployment
IBM Tivoli Netcool Impact
IBM Maximo Asset Management
IBM Rational Build Forge
Netcool/OMNIbus
WebSphere Service Registry and Repository
WebSphere eXtreme Scale
IBM Common Licensing
IBM SPSS Modeler
IBM Cloud Pak for Security
IBM Cloud Object Storage Systems
IBM Content Collector for SAP Applications
IBM Cloud Transformation Advisor
IBM Tivoli System Automation Application Manager
IBM Watson Discovery for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Sterling Secure Proxy
IBM Sterling Connect:Direct for UNIX
IBM Sterling Connect:Direct Web Services
Session Smart Router
IBM Tivoli Monitoring
Tivoli Composite Application Manager for Transactions
IBM Cloud Application Performance Management (APM)
IBM TXSeries for Multiplatforms
IBM MQ
PowerProtect Data Manager
IBM Cloud Pak for Business Automation
IBM Business Automation Workflow
RSA Identity Governance and Lifecycle
IBM Cloud Pak System
IBM Storage Scale System
Dell EMC VxRail Appliance
IBM Tivoli Application Dependency Discovery Manager
IBM Qradar SIEM
IBM License Metric Tool
Event Streams
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
openjdk-17-jre-headless (Ubuntu package)
openjdk-8-jre-headless (Ubuntu package)
openjdk-8-jre (Ubuntu package)
openjdk-8-jdk-headless (Ubuntu package)
openjdk-8-jre-jamvm (Ubuntu package)
openjdk-8-jre-zero (Ubuntu package)
openjdk-11-jdk-headless (Ubuntu package)
openjdk-8-jdk (Ubuntu package)
openjdk-17-jdk (Ubuntu package)
openjdk-17-jre (Ubuntu package)
openjdk-11-jre-headless (Ubuntu package)
openjdk-11-jdk (Ubuntu package)
openjdk-17-jdk-headless (Ubuntu package)
openjdk-11-jre-zero (Ubuntu package)
openjdk-17-jre-zero (Ubuntu package)
openjdk-11-jre (Ubuntu package)
java-1_8_0-ibm-alsa
java-1_8_0-ibm-plugin
java-1_8_0-ibm-devel
java-1_8_0-ibm
java-1_8_0-ibm-demo
java-1_8_0-ibm-src
java-1_8_0-ibm-32bit
java-1_8_0-ibm-devel-32bit
java-1.8.0-ibm-jdbc (Red Hat package)
java-1.8.0-ibm-src (Red Hat package)
java-1.8.0-ibm-plugin (Red Hat package)
java-1.8.0-ibm-webstart (Red Hat package)
java-1.8.0-ibm-headless (Red Hat package)
java-1.8.0-ibm-devel (Red Hat package)
java-1.8.0-ibm-demo (Red Hat package)
java-1.8.0-ibm (Red Hat package)
java-1.8.0-openjdk
java-1.8.0-openjdk-slowdebug
java-1.8.0-openjdk-accessibility
java-1.8.0-openjdk-accessibility-slowdebug
java-1.8.0-openjdk-openjfx-slowdebug
java-1.8.0-openjdk-debuginfo
java-1.8.0-openjdk-openjfx-devel-slowdebug
java-1.8.0-openjdk-debugsource
java-1.8.0-openjdk-openjfx-devel
java-1.8.0-openjdk-openjfx
java-1.8.0-openjdk-headless-slowdebug
java-1.8.0-openjdk-headless
java-1.8.0-openjdk-devel-slowdebug
java-1.8.0-openjdk-devel
java-1.8.0-openjdk-demo-slowdebug
java-1.8.0-openjdk-demo
java-1.8.0-openjdk-src-slowdebug
java-1.8.0-openjdk-src
java-1.8.0-openjdk-javadoc-zip
java-1.8.0-openjdk-javadoc
java-1.8.0-openjdk-accessibility-debug
java-1.8.0-openjdk-javadoc-zip-debug
java-1.8.0-openjdk-demo-debug
java-1.8.0-openjdk-devel-debug
java-1.8.0-openjdk-debug
java-1.8.0-openjdk-headless-debug
java-1.8.0-openjdk-src-debug
java-1.8.0-openjdk-javadoc-debug
java-1.8.0-openjdk (Red Hat package)
java-1_8_0-openjdk-demo
java-1_8_0-openjdk-demo-debuginfo
java-1_8_0-openjdk-devel
java-1_8_0-openjdk-headless
java-1_8_0-openjdk
java-1_8_0-openjdk-debugsource
java-1_8_0-openjdk-debuginfo
java-1_8_0-openjdk-devel-debuginfo
java-1_8_0-openjdk-headless-debuginfo
java-1_8_0-openjdk-src
java-1_8_0-openjdk-accessibility
java-1_8_0-openjdk-javadoc
java-1_8_0-openj9-debugsource
java-1_8_0-openj9
java-1_8_0-openj9-debuginfo
java-1_8_0-openj9-demo-debuginfo
java-1_8_0-openj9-src
java-1_8_0-openj9-devel-debuginfo
java-1_8_0-openj9-headless-debuginfo
java-1_8_0-openj9-headless
java-1_8_0-openj9-demo
java-1_8_0-openj9-devel
java-1_8_0-openj9-accessibility
java-1_8_0-openj9-javadoc
JDK-8332424: Update IANA Language Subtag Registry to Version 2024
JDK-8334418: Update IANA Language Subtag Registry to Version 2024
java-11-openjdk
java-11-openjdk-headless
java-11-openjdk-devel
java-11-openjdk-debugsource
java-11-openjdk-demo
java-11-openjdk-debuginfo
java-11-openjdk (Red Hat package)
java-11-openjdk-static-libs
java-11-openjdk-debug
java-11-openjdk-demo-debug
java-11-openjdk-devel-debug
java-11-openjdk-headless-debug
java-11-openjdk-javadoc
java-11-openjdk-javadoc-debug
java-11-openjdk-javadoc-zip
java-11-openjdk-javadoc-zip-debug
java-11-openjdk-jmods
java-11-openjdk-jmods-debug
java-11-openjdk-src
java-11-openjdk-src-debug
java-11-openjdk-static-libs-debug
java-11-openjdk-devel-debuginfo
java-11-openjdk-headless-debuginfo
java-11-openjdk-demo-slowdebug
java-11-openjdk-devel-slowdebug
java-11-openjdk-headless-slowdebug
java-11-openjdk-jmods-slowdebug
java-11-openjdk-slowdebug
java-11-openjdk-src-slowdebug
java-17-openjdk (Red Hat package)
java-17-openjdk-devel
java-17-openjdk
java-17-openjdk-demo
java-17-openjdk-src
java-17-openjdk-headless
java-17-openjdk-javadoc
java-17-openjdk-javadoc-zip
java-17-openjdk-jmods
java-17-openjdk-static-libs
java-17-openjdk-devel-debuginfo
java-17-openjdk-debugsource
java-17-openjdk-debuginfo
java-17-openjdk-headless-debuginfo
java-17-openjdk-src-slowdebug
java-17-openjdk-slowdebug
java-17-openjdk-jmods-slowdebug
java-17-openjdk-headless-slowdebug
java-17-openjdk-devel-slowdebug
java-17-openjdk-demo-slowdebug
openjdk-17 (debian package)
openjdk-17-crac-jre-zero (Ubuntu package)
openjdk-17-crac-jdk (Ubuntu package)
openjdk-17-crac-jdk-headless (Ubuntu package)
openjdk-17-crac-jre (Ubuntu package)
openjdk-17-crac-jre-headless (Ubuntu package)
java-21-openjdk (Red Hat package)
java-21-openjdk-demo
java-21-openjdk-debugsource
java-21-openjdk-javadoc
java-21-openjdk-devel-debuginfo
java-21-openjdk-headless
java-21-openjdk-debuginfo
java-21-openjdk-devel
java-21-openjdk-headless-debuginfo
java-21-openjdk
java-21-openjdk-jmods
java-21-openjdk-src
openjdk-21-jdk-headless (Ubuntu package)
openjdk-21-jre (Ubuntu package)
openjdk-21-jdk (Ubuntu package)
openjdk-21-jre-headless (Ubuntu package)
openjdk-21-jre-zero (Ubuntu package)
openjdk-21-crac-jdk (Ubuntu package)
openjdk-21-crac-jdk-headless (Ubuntu package)
openjdk-21-crac-jre (Ubuntu package)
openjdk-21-crac-jre-headless (Ubuntu package)
openjdk-21-crac-jre-zero (Ubuntu package)
java-latest-openjdk-devel-slowdebug
java-latest-openjdk-javadoc
java-latest-openjdk-devel
java-latest-openjdk-demo-slowdebug
java-latest-openjdk-demo
java-latest-openjdk
java-latest-openjdk-src-slowdebug
java-latest-openjdk-src
java-latest-openjdk-slowdebug
java-latest-openjdk-jmods-slowdebug
java-latest-openjdk-jmods
java-latest-openjdk-headless
java-latest-openjdk-headless-slowdebug
java-latest-openjdk-javadoc-zip
openjdk-23-jdk (Ubuntu package)
openjdk-23-jdk-headless (Ubuntu package)
openjdk-23-jre (Ubuntu package)
openjdk-23-jre-zero (Ubuntu package)
openjdk-23-jre-headless (Ubuntu package)
RSA Authentication Manager
Juniper Junos Space
Voice Gateway
IBM Copy Services Manager
IBM App Connect Professional
Juniper Secure Analytics (JSA)
IBM Security SOAR

How to mitigate CVE-2024-21210

Install updates from vendor's website.

Storage Protect for Virtual Environments: Data Protection for VMware - update to 8.1.27.0
APEX Cloud Platform for Microsoft Azure - update to 01.04.00.00
Netezza Appliance - update to 1.0.0.1
PowerVM NovaLink - addressed in versions 2.1.1-250324, 2.2.1.1-252403, 2.3.0.1-252403
IBM Cloud Pak System - update to 2.3.6.0
Storage Scale - addressed in versions 5.1.9.8, 5.2.2.1
IBM Storage Scale System - addressed in versions 6.1.9.6, 6.2.2.1
IBM Tivoli Business Service Manager - update to 6.2.0.6
Dell EMC VxRail Appliance - addressed in versions 7.0.533, 8.320
IBM Tivoli Netcool Impact - update to 7.1.0.36
IBM Qradar SIEM - update to 7.5.0 Update Pack 11 IF01
IBM Rational Build Forge - update to 8.0.0.28
OpenJDK Java (for Middleware) - addressed in versions 8.0.432, 11.0.25, 17.0.13, 21.0.5
Storage Protect for Virtual Environments: Data Protection for Hyper-V - update to 8.1.27.0
Storage Protect Backup-Archive Client - update to 8.1.27
Netcool/OMNIbus - update to 8.1.0.34
Storage Protect for Space Management - update to 8.1.27.0
Storage Virtualize - addressed in versions 8.4.0.16, 8.5.0.14, 8.6.0.6, 8.7.0.2, 8.7.1.0, 8.7.2.1
WebSphere eXtreme Scale - update to 8.6.1.6 PH65762
RSA Authentication Manager - update to 8.7 SP2 Patch 5
IBM License Metric Tool - update to 9.2.39
Event Streams - update to 11.5.1
Cognos Transformer - addressed in versions 11.2.4 FP 6, 12.0.4 FP 1
Juniper Junos Space - update to 24.1R3
openjdk-17-jre-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04, 17.0.13+11-2ubuntu1~24.10
openjdk-8-jre-headless (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04, 8u432-ga~us1-0ubuntu2~24.04, 8u432-ga~us1-0ubuntu2~24.10, 8u442-b06~us1-0ubuntu1~20.04, 8u442-b06~us1-0ubuntu1~22.04, 8u442-b06~us1-0ubuntu1~24.04, 8u442-b06~us1-0ubuntu1~24.10
openjdk-8-jre (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04, 8u432-ga~us1-0ubuntu2~24.04, 8u432-ga~us1-0ubuntu2~24.10, 8u442-b06~us1-0ubuntu1~20.04, 8u442-b06~us1-0ubuntu1~22.04, 8u442-b06~us1-0ubuntu1~24.04, 8u442-b06~us1-0ubuntu1~24.10
openjdk-8-jdk-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04, 8u432-ga~us1-0ubuntu2~24.04, 8u432-ga~us1-0ubuntu2~24.10, 8u442-b06~us1-0ubuntu1~20.04, 8u442-b06~us1-0ubuntu1~22.04, 8u442-b06~us1-0ubuntu1~24.04, 8u442-b06~us1-0ubuntu1~24.10
openjdk-8-jre-jamvm (Ubuntu package) - update to Ubuntu Pro
openjdk-8-jre-zero (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04, 8u432-ga~us1-0ubuntu2~24.04, 8u432-ga~us1-0ubuntu2~24.10, 8u442-b06~us1-0ubuntu1~20.04, 8u442-b06~us1-0ubuntu1~22.04, 8u442-b06~us1-0ubuntu1~24.04, 8u442-b06~us1-0ubuntu1~24.10
openjdk-11-jdk-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.25+9-1ubuntu1~20.04, 11.0.25+9-1ubuntu1~22.04, 11.0.25+9-1ubuntu1~24.04, 11.0.25+9-1ubuntu1~24.10
openjdk-8-jdk (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04, 8u432-ga~us1-0ubuntu2~24.04, 8u432-ga~us1-0ubuntu2~24.10, 8u442-b06~us1-0ubuntu1~20.04, 8u442-b06~us1-0ubuntu1~22.04, 8u442-b06~us1-0ubuntu1~24.04, 8u442-b06~us1-0ubuntu1~24.10
openjdk-17-jdk (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04, 17.0.13+11-2ubuntu1~24.10
openjdk-17-jre (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04, 17.0.13+11-2ubuntu1~24.10
openjdk-11-jre-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.25+9-1ubuntu1~20.04, 11.0.25+9-1ubuntu1~22.04, 11.0.25+9-1ubuntu1~24.04, 11.0.25+9-1ubuntu1~24.10
openjdk-11-jdk (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.25+9-1ubuntu1~20.04, 11.0.25+9-1ubuntu1~22.04, 11.0.25+9-1ubuntu1~24.04, 11.0.25+9-1ubuntu1~24.10
openjdk-17-jdk-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04, 17.0.13+11-2ubuntu1~24.10
openjdk-11-jre-zero (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.25+9-1ubuntu1~20.04, 11.0.25+9-1ubuntu1~22.04, 11.0.25+9-1ubuntu1~24.04, 11.0.25+9-1ubuntu1~24.10
openjdk-17-jre-zero (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04, 17.0.13+11-2ubuntu1~24.10
openjdk-11-jre (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.25+9-1ubuntu1~20.04, 11.0.25+9-1ubuntu1~22.04, 11.0.25+9-1ubuntu1~24.04, 11.0.25+9-1ubuntu1~24.10
Voice Gateway - addressed in versions 1.0.8.15, 1.0.8.18
java-1_8_0-ibm-alsa - addressed in versions 1.8.0_sr8.35-30.129.1, 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-plugin - addressed in versions 1.8.0_sr8.35-30.129.1, 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-devel - addressed in versions 1.8.0_sr8.35-30.129.1, 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm - addressed in versions 1.8.0_sr8.35-30.129.1, 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-demo - update to 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-src - update to 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-32bit - update to 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-devel-32bit - update to 1.8.0_sr8.35-150000.3.95.1
java-1.8.0-ibm-jdbc (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-src (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-plugin (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-webstart (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-headless (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-devel (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-demo (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-openjdk - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-accessibility - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-accessibility-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-openjfx-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-debuginfo - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-openjfx-devel-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-debugsource - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-openjfx-devel - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-openjfx - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-headless-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-headless - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-devel-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-devel - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-demo-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-demo - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-src-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-src - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-javadoc-zip - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-javadoc - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-accessibility-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-javadoc-zip-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-devel - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-demo-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-devel-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-headless - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-demo - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-accessibility - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-headless-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-javadoc-zip - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-src - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-src-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-javadoc - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-javadoc-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk (Red Hat package) - addressed in versions 1.8.0.432.b06-1.el7_9, 1.8.0.432.b06-1.el8_2, 1.8.0.432.b06-1.el8_4, 1.8.0.432.b06-1.el8_6, 1.8.0.432.b06-1.el9_0, 1.8.0.432.b06-2.el8, 1.8.0.432.b06-2.el9
java-1_8_0-openjdk-demo - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-demo-debuginfo - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-devel - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-headless - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-debugsource - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-debuginfo - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-devel-debuginfo - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-headless-debuginfo - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-src - update to 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-accessibility - update to 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-javadoc - update to 1.8.0.432-150000.3.100.1
java-1_8_0-openj9-debugsource - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9 - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-debuginfo - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-demo-debuginfo - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-src - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-devel-debuginfo - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-headless-debuginfo - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-headless - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-demo - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-devel - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-accessibility - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-javadoc - update to 1.8.0.442-150200.3.51.1
IBM Cloud Pak for Security - update to 1.11.0.0
IBM Cloud Object Storage Systems - addressed in versions 3.18.0.84, 3.18.5.40
IBM Content Collector for SAP Applications - addressed in versions 4.0.0.2.0.2, 4.0.0.3, 4.0.0.4
IBM Cloud Transformation Advisor - update to 4.0.1
Application Modernization Accelerator - update to 4.0.1
IBM Tivoli System Automation Application Manager - addressed in versions 4.1.0.3.0.14, 4.1.0.4.0.11, 4.1.0.5.0.9, 4.1.0.6.0.3
Tivoli System Automation for Multiplatforms - addressed in versions 4.1.0.4.0.22, 4.1.0.5.0.16, 4.1.0.6.0.11, 4.1.0.7.0.11, 4.1.1.0.0.5, 4.1.1.1.0.5
IBM Cloud Pak for Watson AIOps - update to 4.8.0
IBM Watson Discovery for IBM Cloud Pak for Data - addressed in versions 4.8.8, 5.1.1
watsonx Assistant for IBM Cloud Pak for Data - update to 4.8.8
App Connect Enterprise Certified Container - addressed in versions 5.0.22, 12.0.6, 12.6.0
watsonx Assistant Cartridge - update to 5.1.3
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.1.3
JDK-8332424: Update IANA Language Subtag Registry to Version 2024 - update to 05-16
IBM Secure External Authentication Server - addressed in versions 6.0.3.1 iFix 02, 6.1.0.2 iFix 02
IBM Sterling Secure Proxy - addressed in versions 6.0.3.1 iFix 03, 6.1.0.1 iFix 03, 6.2.0.1 iFix 02
IBM Sterling Connect:Direct for UNIX - addressed in versions 6.1.0.4.119, 6.2.0.7.44
IBM Sterling Connect:Direct Web Services - addressed in versions 6.1.0.27, 6.2.0.26
Session Smart Router - addressed in versions 6.2.10, 6.3.7
IBM Tivoli Monitoring - update to 6.3.0 FP7 Service Pack 6
IBM Copy Services Manager - update to 6.3.14
JDK-8334418: Update IANA Language Subtag Registry to Version 2024 - update to 06-14
IBM Java SDK - addressed in versions 7.1.5.24, 8.0.8.35
Security Directory Integrator - addressed in versions 7.2.0 LA0034, 10.0.0 LA0005
Tivoli Composite Application Manager for Transactions - update to 7.4.0.2.25
Juniper Secure Analytics (JSA) - update to 7.5.0 UP11 IF03
IBM App Connect Professional - update to 7.5.5.0.30
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.28
Storage Protect Operations Center - update to 8.1.26
CICS Transaction Gateway for Multiplatforms - addressed in versions 9.1, 9.2.0.2, 9.3.0.0
CICS Transaction Gateway Desktop Edition - addressed in versions 9.1, 9.2.0.2, 9.3.0.0
IBM TXSeries for Multiplatforms - addressed in versions 9.1.0.3, 10.1.0.0, 11.1.0.0 ifix1
IBM MQ - addressed in versions 9.1.0.27, 9.2.0.31, 9.3.0.27, 9.4.0.10, 9.4.2
IBM CICS TX Advanced - addressed in versions 10.1.0.0 ifix36, 11.1.0.0 ifix28
java-11-openjdk - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk-headless - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk-devel - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk-debugsource - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk-demo - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk-debuginfo - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk (Red Hat package) - addressed in versions 11.0.25.0.9-1.el7_9, 11.0.25.0.9-1.el8_2, 11.0.25.0.9-1.el8_4, 11.0.25.0.9-1.el8_6, 11.0.25.0.9-1.el9_0, 11.0.25.0.9-2.el8, 11.0.25.0.9-2.el9
java-11-openjdk-static-libs - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-demo - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-demo-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-devel - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-devel-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-headless - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-headless-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-javadoc - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-javadoc-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-javadoc-zip - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-javadoc-zip-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-jmods - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-jmods-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-src - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-src-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-static-libs-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-devel-debuginfo - update to 11.0.25.0-150000.3.119.1
java-11-openjdk-headless-debuginfo - update to 11.0.25.0-150000.3.119.1
java-11-openjdk-javadoc - update to 11.0.25.0-150000.3.119.1
java-11-openjdk-jmods - update to 11.0.25.0-150000.3.119.1
java-11-openjdk-src - update to 11.0.25.0-150000.3.119.1
java-11-openjdk-javadoc-zip - update to 11.0.25.9-3
java-11-openjdk - update to 11.0.25.9-3
java-11-openjdk-debuginfo - update to 11.0.25.9-3
java-11-openjdk-debugsource - update to 11.0.25.9-3
java-11-openjdk-demo - update to 11.0.25.9-3
java-11-openjdk-demo-slowdebug - update to 11.0.25.9-3
java-11-openjdk-devel - update to 11.0.25.9-3
java-11-openjdk-devel-slowdebug - update to 11.0.25.9-3
java-11-openjdk-headless - update to 11.0.25.9-3
java-11-openjdk-headless-slowdebug - update to 11.0.25.9-3
java-11-openjdk-javadoc - update to 11.0.25.9-3
java-11-openjdk-jmods - update to 11.0.25.9-3
java-11-openjdk-jmods-slowdebug - update to 11.0.25.9-3
java-11-openjdk-slowdebug - update to 11.0.25.9-3
java-11-openjdk-src - update to 11.0.25.9-3
java-11-openjdk-src-slowdebug - update to 11.0.25.9-3
IBM CICS TX Standard - update to 11.1.0.0 ifix29
IBM App Connect Enterprise - addressed in versions 12.0.12.10, 13.0.2.1
EMC Cloud Tiering Appliance - update to 13.2.0.2.32
java-17-openjdk (Red Hat package) - addressed in versions 17.0.13.0.11-1.el8_4, 17.0.13.0.11-1.el8_6, 17.0.13.0.11-1.el9_0, 17.0.13.0.11-3.el8, 17.0.13.0.11-3.el9
java-17-openjdk-devel - update to 17.0.13.0.11-3.0.2
java-17-openjdk - update to 17.0.13.0.11-3.0.2
java-17-openjdk-demo - update to 17.0.13.0.11-3.0.2
java-17-openjdk-src - update to 17.0.13.0.11-3.0.2
java-17-openjdk-headless - update to 17.0.13.0.11-3.0.2
java-17-openjdk-javadoc - update to 17.0.13.0.11-3.0.2
java-17-openjdk-javadoc-zip - update to 17.0.13.0.11-3.0.2
java-17-openjdk-jmods - update to 17.0.13.0.11-3.0.2
java-17-openjdk-static-libs - update to 17.0.13.0.11-3.0.2
java-17-openjdk-javadoc - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-src - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-jmods - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-headless - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-devel-debuginfo - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-debugsource - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-devel - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-debuginfo - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-headless-debuginfo - update to 17.0.13.0-150400.3.48.2
java-17-openjdk - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-demo - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-demo - update to 17.0.13.11-2
java-17-openjdk - update to 17.0.13.11-2
java-17-openjdk-src-slowdebug - update to 17.0.13.11-2
java-17-openjdk-src - update to 17.0.13.11-2
java-17-openjdk-slowdebug - update to 17.0.13.11-2
java-17-openjdk-jmods-slowdebug - update to 17.0.13.11-2
java-17-openjdk-jmods - update to 17.0.13.11-2
java-17-openjdk-javadoc-zip - update to 17.0.13.11-2
java-17-openjdk-javadoc - update to 17.0.13.11-2
java-17-openjdk-headless-slowdebug - update to 17.0.13.11-2
java-17-openjdk-headless - update to 17.0.13.11-2
java-17-openjdk-devel-slowdebug - update to 17.0.13.11-2
java-17-openjdk-devel - update to 17.0.13.11-2
java-17-openjdk-demo-slowdebug - update to 17.0.13.11-2
java-17-openjdk-debugsource - update to 17.0.13.11-2
java-17-openjdk-debuginfo - update to 17.0.13.11-2
openjdk-17 (debian package) - update to 17.0.13+11-2~deb12u1
openjdk-17-crac-jre-zero (Ubuntu package) - update to 17.0.14+7-0ubuntu1~24.10
openjdk-17-crac-jdk (Ubuntu package) - update to 17.0.14+7-0ubuntu1~24.10
openjdk-17-crac-jdk-headless (Ubuntu package) - update to 17.0.14+7-0ubuntu1~24.10
openjdk-17-crac-jre (Ubuntu package) - update to 17.0.14+7-0ubuntu1~24.10
openjdk-17-crac-jre-headless (Ubuntu package) - update to 17.0.14+7-0ubuntu1~24.10
CloudBoost Virtual Appliance - update to 19.12.0.1
PowerProtect Data Manager - update to 19.19.0-15
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF039, 24.0.0-IF004, 24.0.1
java-21-openjdk (Red Hat package) - addressed in versions 21.0.5.0.10-3.el8, 21.0.5.0.10-3.el9
java-21-openjdk-demo - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-debugsource - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-javadoc - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-devel-debuginfo - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-headless - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-debuginfo - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-devel - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-headless-debuginfo - update to 21.0.5.0-150600.3.6.3
java-21-openjdk - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-jmods - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-src - update to 21.0.5.0-150600.3.6.3
openjdk-21-jdk-headless (Ubuntu package) - addressed in versions 21.0.5+11-1ubuntu1~20.04, 21.0.5+11-1ubuntu1~22.04, 21.0.5+11-1ubuntu1~24.04, 21.0.5+11-1ubuntu1~24.10
openjdk-21-jre (Ubuntu package) - addressed in versions 21.0.5+11-1ubuntu1~20.04, 21.0.5+11-1ubuntu1~22.04, 21.0.5+11-1ubuntu1~24.04, 21.0.5+11-1ubuntu1~24.10
openjdk-21-jdk (Ubuntu package) - addressed in versions 21.0.5+11-1ubuntu1~20.04, 21.0.5+11-1ubuntu1~22.04, 21.0.5+11-1ubuntu1~24.04, 21.0.5+11-1ubuntu1~24.10
openjdk-21-jre-headless (Ubuntu package) - addressed in versions 21.0.5+11-1ubuntu1~20.04, 21.0.5+11-1ubuntu1~22.04, 21.0.5+11-1ubuntu1~24.04, 21.0.5+11-1ubuntu1~24.10
openjdk-21-jre-zero (Ubuntu package) - addressed in versions 21.0.5+11-1ubuntu1~20.04, 21.0.5+11-1ubuntu1~22.04, 21.0.5+11-1ubuntu1~24.04, 21.0.5+11-1ubuntu1~24.10
openjdk-21-crac-jdk (Ubuntu package) - update to 21.0.6+7-0ubuntu1~24.10
openjdk-21-crac-jdk-headless (Ubuntu package) - update to 21.0.6+7-0ubuntu1~24.10
openjdk-21-crac-jre (Ubuntu package) - update to 21.0.6+7-0ubuntu1~24.10
openjdk-21-crac-jre-headless (Ubuntu package) - update to 21.0.6+7-0ubuntu1~24.10
openjdk-21-crac-jre-zero (Ubuntu package) - update to 21.0.6+7-0ubuntu1~24.10
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.19, 23.0.19
java-latest-openjdk-devel-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-javadoc - update to 23.0.1.11-1
java-latest-openjdk-devel - update to 23.0.1.11-1
java-latest-openjdk-demo-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-demo - update to 23.0.1.11-1
java-latest-openjdk - update to 23.0.1.11-1
java-latest-openjdk-src-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-src - update to 23.0.1.11-1
java-latest-openjdk-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-jmods-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-jmods - update to 23.0.1.11-1
java-latest-openjdk-headless - update to 23.0.1.11-1
java-latest-openjdk-headless-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-javadoc-zip - update to 23.0.1.11-1
openjdk-23-jdk (Ubuntu package) - update to 23.0.1+11-1ubuntu1~24.10.1
openjdk-23-jdk-headless (Ubuntu package) - update to 23.0.1+11-1ubuntu1~24.10.1
openjdk-23-jre (Ubuntu package) - update to 23.0.1+11-1ubuntu1~24.10.1
openjdk-23-jre-zero (Ubuntu package) - update to 23.0.1+11-1ubuntu1~24.10.1
openjdk-23-jre-headless (Ubuntu package) - update to 23.0.1+11-1ubuntu1~24.10.1
IBM Business Automation Workflow - addressed in versions 24.0.0-IF005, 24.0.1-IF002
Business Automation Insights - addressed in versions 24.0.0.0.2, 24.0.1.0.1
IBM Security SOAR - update to 51.0.5.0

External References

Related Security Bulletins