Improper input validation in Oracle GraalVM Enterprise Edition - CVE-2024-21217

 

Improper input validation in Oracle GraalVM Enterprise Edition - CVE-2024-21217

Published: October 15, 2024


Vulnerability identifier: #VU98648
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-21217
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper input validation within the Serialization component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.


Affected software

Oracle GraalVM Enterprise Edition
Rational Functional Tester (RFT)
SecurID Governance and Lifecycle
IBM Observability with Instana
z/Transaction Processing Facility ( z/TPF)
Cryostat
IBM Watson Knowledge Catalog in Cloud Pak for Data
IBM Tivoli Business Service Manager
Communications Server for Linux on System z
Communications Server for Data Center Deployment
IBM Tivoli Netcool Impact
IBM Maximo Asset Management
IBM Rational Build Forge
Netcool/OMNIbus
WebSphere Service Registry and Repository
WebSphere eXtreme Scale
IBM Common Licensing
IBM Power Hardware Management Console (HMC)
IBM SPSS Modeler
IBM Cloud Pak for Security
IBM Cloud Object Storage Systems
IBM Content Collector for SAP Applications
IBM Cloud Transformation Advisor
IBM Tivoli System Automation Application Manager
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Decision Optimization for Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Sterling Secure Proxy
IBM Sterling Connect:Direct for UNIX
IBM Sterling Connect:Direct Web Services
Session Smart Router
IBM Tivoli Monitoring
Tivoli Composite Application Manager for Transactions
IBM Cloud Application Performance Management (APM)
IBM TXSeries for Multiplatforms
IBM MQ
PowerProtect Data Manager
IBM Cloud Pak for Business Automation
IBM Business Automation Workflow
Storage Protect for Virtual Environments: Data Protection for VMware
APEX Cloud Platform for Microsoft Azure
Netezza Appliance
Storage Defender - Resiliency Service
PowerVM NovaLink
IBM Planning Analytics Workspace
Data Product Hub
Storage Scale
Communications Server for Linux
Tivoli Monitoring for Virtual Environments Agent for Linux Kernel-based Virtual Machines
Tivoli Monitoring for Virtual Environments Base
Storage Protect for Virtual Environments: Data Protection for Hyper-V
Storage Protect Backup-Archive Client
Storage Protect for Space Management
IBM OpenPages with Watson
Storage Virtualize
IBM Event Endpoint Management
Cognos Transformer
DB2 Query Management Facility
Application Modernization Accelerator
Tivoli System Automation for Multiplatforms
IBM Cloud Pak for Watson AIOps
watsonx Assistant for IBM Cloud Pak for Data
Knowledge Catalog Neo4j On Cloud Pak for Data
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
watsonx Assistant Cartridge
IBM Secure External Authentication Server
IBM Sterling Connect:Direct for Microsoft Windows
Security Directory Integrator
IBM Semeru Runtimes
Storage Protect Operations Center
CICS Transaction Gateway Desktop Edition
CICS Transaction Gateway for Multiplatforms
EMC Cloud Tiering Appliance
CloudBoost Virtual Appliance
Robotic Process Automation for Cloud Pak
Business Automation Insights
RSA Identity Governance and Lifecycle
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
Gentoo Linux
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
Debian Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
Anolis OS
SUSE Enterprise Storage
IBM i
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
SUSE Linux Enterprise Server 12 SP5 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Basesystem Module
SUSE Package Hub 15
Legacy Module
openSUSE Leap
Ubuntu
openEuler
IBM InfoSphere Information Server
Planning Analytics Local
watsonx.data
IBM Cloud Pak System
IBM Storage Scale System
Dell EMC VxRail Appliance
IBM Tivoli Application Dependency Discovery Manager
IBM Qradar SIEM
IBM License Metric Tool
Event Streams
Oracle Java SE
OpenJDK Java (for Middleware)
Rational Business Developer (RBD)
Oracle GraalVM for JDK
IBM Java SDK
IBM CICS TX Advanced
IBM CICS TX Standard
IBM App Connect Enterprise
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
openjdk-11-jre (Ubuntu package)
openjdk-8-jdk-headless (Ubuntu package)
openjdk-11-jdk-headless (Ubuntu package)
openjdk-11-jdk (Ubuntu package)
openjdk-11-jre-zero (Ubuntu package)
openjdk-8-jre (Ubuntu package)
openjdk-8-jre-headless (Ubuntu package)
openjdk-8-jre-zero (Ubuntu package)
openjdk-8-jre-jamvm (Ubuntu package)
openjdk-17-jre-zero (Ubuntu package)
openjdk-8-jdk (Ubuntu package)
openjdk-17-jdk (Ubuntu package)
openjdk-11-jre-headless (Ubuntu package)
openjdk-17-jdk-headless (Ubuntu package)
openjdk-17-jre-headless (Ubuntu package)
openjdk-17-jre (Ubuntu package)
java-1_8_0-ibm-plugin
java-1_8_0-ibm
java-1_8_0-ibm-devel
java-1_8_0-ibm-alsa
java-1_8_0-ibm-demo
java-1_8_0-ibm-src
java-1_8_0-ibm-32bit
java-1_8_0-ibm-devel-32bit
java-1.8.0-ibm (Red Hat package)
java-1.8.0-ibm-webstart (Red Hat package)
java-1.8.0-ibm-src (Red Hat package)
java-1.8.0-ibm-plugin (Red Hat package)
java-1.8.0-ibm-jdbc (Red Hat package)
java-1.8.0-ibm-headless (Red Hat package)
java-1.8.0-ibm-devel (Red Hat package)
java-1.8.0-ibm-demo (Red Hat package)
java-1.8.0-openjdk-devel
java-1.8.0-openjdk-headless
java-1.8.0-openjdk-headless-slowdebug
java-1.8.0-openjdk-openjfx
java-1.8.0-openjdk-devel-slowdebug
java-1.8.0-openjdk-accessibility-slowdebug
java-1.8.0-openjdk-openjfx-devel
java-1.8.0-openjdk-openjfx-devel-slowdebug
java-1.8.0-openjdk-openjfx-slowdebug
java-1.8.0-openjdk-slowdebug
java-1.8.0-openjdk-src
java-1.8.0-openjdk-src-slowdebug
java-1.8.0-openjdk-javadoc
java-1.8.0-openjdk-javadoc-zip
java-1.8.0-openjdk
java-1.8.0-openjdk-accessibility
java-1.8.0-openjdk-debuginfo
java-1.8.0-openjdk-debugsource
java-1.8.0-openjdk-demo
java-1.8.0-openjdk-demo-slowdebug
java-1.8.0-openjdk-accessibility-debug
java-1.8.0-openjdk-debug
java-1.8.0-openjdk-demo-debug
java-1.8.0-openjdk-javadoc-zip-debug
java-1.8.0-openjdk-javadoc-debug
java-1.8.0-openjdk-src-debug
java-1.8.0-openjdk-headless-debug
java-1.8.0-openjdk-devel-debug
java-1.8.0-openjdk (Red Hat package)
java-1_8_0-openjdk-devel-debuginfo
java-1_8_0-openjdk-headless-debuginfo
java-1_8_0-openjdk-debuginfo
java-1_8_0-openjdk-demo
java-1_8_0-openjdk-demo-debuginfo
java-1_8_0-openjdk-devel
java-1_8_0-openjdk-headless
java-1_8_0-openjdk
java-1_8_0-openjdk-debugsource
java-1_8_0-openjdk-javadoc
java-1_8_0-openjdk-src
java-1_8_0-openjdk-accessibility
java-1_8_0-openj9-debugsource
java-1_8_0-openj9
java-1_8_0-openj9-debuginfo
java-1_8_0-openj9-demo-debuginfo
java-1_8_0-openj9-devel-debuginfo
java-1_8_0-openj9-headless-debuginfo
java-1_8_0-openj9-headless
java-1_8_0-openj9-demo
java-1_8_0-openj9-accessibility
java-1_8_0-openj9-src
java-1_8_0-openj9-javadoc
java-1_8_0-openj9-devel
JDK-8332424: Update IANA Language Subtag Registry to Version 2024
JDK-8334418: Update IANA Language Subtag Registry to Version 2024
java-11-openjdk-devel
java-11-openjdk-demo
java-11-openjdk-debugsource
java-11-openjdk
java-11-openjdk-headless
java-11-openjdk-debuginfo
java-11-openjdk (Red Hat package)
java-11-openjdk-static-libs
java-11-openjdk-static-libs-debug
java-11-openjdk-src-debug
java-11-openjdk-javadoc
java-11-openjdk-src
java-11-openjdk-debug
java-11-openjdk-jmods-debug
java-11-openjdk-jmods
java-11-openjdk-javadoc-zip-debug
java-11-openjdk-javadoc-zip
java-11-openjdk-demo-debug
java-11-openjdk-devel-debug
java-11-openjdk-headless-debug
java-11-openjdk-javadoc-debug
java-11-openjdk-headless-debuginfo
java-11-openjdk-devel-debuginfo
java-11-openjdk-slowdebug
java-11-openjdk-src-slowdebug
java-11-openjdk-jmods-slowdebug
java-11-openjdk-headless-slowdebug
java-11-openjdk-devel-slowdebug
java-11-openjdk-demo-slowdebug
java-17-openjdk (Red Hat package)
java-17-openjdk-headless
java-17-openjdk-src
java-17-openjdk-jmods
java-17-openjdk-static-libs
java-17-openjdk-javadoc-zip
java-17-openjdk-javadoc
java-17-openjdk-devel
java-17-openjdk-demo
java-17-openjdk
java-17-openjdk-devel-debuginfo
java-17-openjdk-debugsource
java-17-openjdk-debuginfo
java-17-openjdk-headless-debuginfo
java-17-openjdk-src-slowdebug
java-17-openjdk-slowdebug
java-17-openjdk-demo-slowdebug
java-17-openjdk-devel-slowdebug
java-17-openjdk-headless-slowdebug
java-17-openjdk-jmods-slowdebug
openjdk-17 (debian package)
openjdk-17-crac-jre-headless (Ubuntu package)
openjdk-17-crac-jre (Ubuntu package)
openjdk-17-crac-jdk-headless (Ubuntu package)
openjdk-17-crac-jdk (Ubuntu package)
openjdk-17-crac-jre-zero (Ubuntu package)
java-21-openjdk (Red Hat package)
java-21-openjdk-devel
java-21-openjdk-javadoc
java-21-openjdk-src
java-21-openjdk-jmods
java-21-openjdk
java-21-openjdk-headless-debuginfo
java-21-openjdk-demo
java-21-openjdk-debuginfo
java-21-openjdk-debugsource
java-21-openjdk-devel-debuginfo
java-21-openjdk-headless
openjdk-21-jdk-headless (Ubuntu package)
openjdk-21-jre-zero (Ubuntu package)
openjdk-21-jre-headless (Ubuntu package)
openjdk-21-jre (Ubuntu package)
openjdk-21-jdk (Ubuntu package)
openjdk-21-crac-jdk-headless (Ubuntu package)
openjdk-21-crac-jre-zero (Ubuntu package)
openjdk-21-crac-jre-headless (Ubuntu package)
openjdk-21-crac-jdk (Ubuntu package)
openjdk-21-crac-jre (Ubuntu package)
java-latest-openjdk-slowdebug
java-latest-openjdk-src
java-latest-openjdk-javadoc
java-latest-openjdk-headless-slowdebug
java-latest-openjdk-headless
java-latest-openjdk-devel-slowdebug
java-latest-openjdk-devel
java-latest-openjdk-demo-slowdebug
java-latest-openjdk-demo
java-latest-openjdk
java-latest-openjdk-src-slowdebug
java-latest-openjdk-javadoc-zip
java-latest-openjdk-jmods-slowdebug
java-latest-openjdk-jmods
openjdk-23-jdk (Ubuntu package)
openjdk-23-jdk-headless (Ubuntu package)
openjdk-23-jre-zero (Ubuntu package)
openjdk-23-jre-headless (Ubuntu package)
openjdk-23-jre (Ubuntu package)
RSA Authentication Manager
Juniper Junos Space
Voice Gateway
IBM Copy Services Manager
IBM App Connect Professional
Juniper Secure Analytics (JSA)
IBM Security SOAR

How to mitigate CVE-2024-21217

Install updates from vendor's website.

Storage Protect for Virtual Environments: Data Protection for VMware - update to 8.1.27.0
APEX Cloud Platform for Microsoft Azure - update to 01.04.00.00
Netezza Appliance - update to 1.0.0.1
IBM Observability with Instana - update to 1.0.297
Storage Defender - Resiliency Service - update to 2.0.15
PowerVM NovaLink - addressed in versions 2.1.1-250324, 2.2.1.1-252403, 2.3.0.1-252403
IBM Planning Analytics Workspace - addressed in versions 2.0.103, 2.1.10
Planning Analytics Local - addressed in versions 2.0.9.21, 2.1.10
watsonx.data - update to 2.2.2
IBM Cloud Pak System - update to 2.3.6.0
Data Product Hub - update to 5.1.0
IBM Watson Knowledge Catalog in Cloud Pak for Data - update to 5.2
Storage Scale - addressed in versions 5.1.9.8, 5.2.2.1
IBM Storage Scale System - addressed in versions 6.1.9.6, 6.2.2.1
IBM Tivoli Business Service Manager - update to 6.2.0.6
Dell EMC VxRail Appliance - addressed in versions 7.0.533, 8.320
IBM Tivoli Netcool Impact - update to 7.1.0.36
IBM Qradar SIEM - update to 7.5.0 Update Pack 11 IF01
IBM Rational Build Forge - update to 8.0.0.28
OpenJDK Java (for Middleware) - addressed in versions 8.0.432, 11.0.25, 17.0.13, 21.0.5
Storage Protect for Virtual Environments: Data Protection for Hyper-V - update to 8.1.27.0
Netcool/OMNIbus - update to 8.1.0.34
Storage Protect Backup-Archive Client - update to 8.1.27
Storage Protect for Space Management - update to 8.1.27.0
Storage Virtualize - addressed in versions 8.4.0.16, 8.5.0.14, 8.6.0.6, 8.7.0.2, 8.7.1.0, 8.7.2.1
WebSphere eXtreme Scale - update to 8.6.1.6 PH65762
RSA Authentication Manager - update to 8.7 SP2 Patch 5
IBM License Metric Tool - update to 9.2.39
Event Streams - update to 11.5.1
IBM Power Hardware Management Console (HMC) - addressed in versions 10.2.1040.0 SP3, 10.3.1060.0 SP1
IBM Event Endpoint Management - update to 11.7.0
Cognos Transformer - addressed in versions 11.2.4 FP 6, 12.0.4 FP 1
Juniper Junos Space - update to 24.1R3
openjdk-11-jre (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.25+9-1ubuntu1~20.04, 11.0.25+9-1ubuntu1~22.04, 11.0.25+9-1ubuntu1~24.04, 11.0.25+9-1ubuntu1~24.10
openjdk-8-jdk-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04, 8u432-ga~us1-0ubuntu2~24.04, 8u432-ga~us1-0ubuntu2~24.10, 8u442-b06~us1-0ubuntu1~20.04, 8u442-b06~us1-0ubuntu1~22.04, 8u442-b06~us1-0ubuntu1~24.04, 8u442-b06~us1-0ubuntu1~24.10
openjdk-11-jdk-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.25+9-1ubuntu1~20.04, 11.0.25+9-1ubuntu1~22.04, 11.0.25+9-1ubuntu1~24.04, 11.0.25+9-1ubuntu1~24.10
openjdk-11-jdk (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.25+9-1ubuntu1~20.04, 11.0.25+9-1ubuntu1~22.04, 11.0.25+9-1ubuntu1~24.04, 11.0.25+9-1ubuntu1~24.10
openjdk-11-jre-zero (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.25+9-1ubuntu1~20.04, 11.0.25+9-1ubuntu1~22.04, 11.0.25+9-1ubuntu1~24.04, 11.0.25+9-1ubuntu1~24.10
openjdk-8-jre (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04, 8u432-ga~us1-0ubuntu2~24.04, 8u432-ga~us1-0ubuntu2~24.10, 8u442-b06~us1-0ubuntu1~20.04, 8u442-b06~us1-0ubuntu1~22.04, 8u442-b06~us1-0ubuntu1~24.04, 8u442-b06~us1-0ubuntu1~24.10
openjdk-8-jre-headless (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04, 8u432-ga~us1-0ubuntu2~24.04, 8u432-ga~us1-0ubuntu2~24.10, 8u442-b06~us1-0ubuntu1~20.04, 8u442-b06~us1-0ubuntu1~22.04, 8u442-b06~us1-0ubuntu1~24.04, 8u442-b06~us1-0ubuntu1~24.10
openjdk-8-jre-zero (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04, 8u432-ga~us1-0ubuntu2~24.04, 8u432-ga~us1-0ubuntu2~24.10, 8u442-b06~us1-0ubuntu1~20.04, 8u442-b06~us1-0ubuntu1~22.04, 8u442-b06~us1-0ubuntu1~24.04, 8u442-b06~us1-0ubuntu1~24.10
openjdk-8-jre-jamvm (Ubuntu package) - update to Ubuntu Pro
openjdk-17-jre-zero (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04, 17.0.13+11-2ubuntu1~24.10
openjdk-8-jdk (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 8u432-ga~us1-0ubuntu2~20.04, 8u432-ga~us1-0ubuntu2~22.04, 8u432-ga~us1-0ubuntu2~24.04, 8u432-ga~us1-0ubuntu2~24.10, 8u442-b06~us1-0ubuntu1~20.04, 8u442-b06~us1-0ubuntu1~22.04, 8u442-b06~us1-0ubuntu1~24.04, 8u442-b06~us1-0ubuntu1~24.10
openjdk-17-jdk (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04, 17.0.13+11-2ubuntu1~24.10
openjdk-11-jre-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 11.0.25+9-1ubuntu1~20.04, 11.0.25+9-1ubuntu1~22.04, 11.0.25+9-1ubuntu1~24.04, 11.0.25+9-1ubuntu1~24.10
openjdk-17-jdk-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04, 17.0.13+11-2ubuntu1~24.10
openjdk-17-jre-headless (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04, 17.0.13+11-2ubuntu1~24.10
openjdk-17-jre (Ubuntu package) - addressed in versions Ubuntu Pro, 17.0.13+11-2ubuntu1~20.04, 17.0.13+11-2ubuntu1~22.04, 17.0.13+11-2ubuntu1~24.04, 17.0.13+11-2ubuntu1~24.10
Voice Gateway - addressed in versions 1.0.8.15, 1.0.8.18
java-1_8_0-ibm-plugin - addressed in versions 1.8.0_sr8.35-30.129.1, 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm - addressed in versions 1.8.0_sr8.35-30.129.1, 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-devel - addressed in versions 1.8.0_sr8.35-30.129.1, 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-alsa - addressed in versions 1.8.0_sr8.35-30.129.1, 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-demo - update to 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-src - update to 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-32bit - update to 1.8.0_sr8.35-150000.3.95.1
java-1_8_0-ibm-devel-32bit - update to 1.8.0_sr8.35-150000.3.95.1
java-1.8.0-ibm (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-webstart (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-src (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-plugin (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-jdbc (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-headless (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-devel (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-ibm-demo (Red Hat package) - update to 1.8.0.8.35-1.el8_10
java-1.8.0-openjdk-devel - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-headless - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-headless-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-openjfx - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-devel-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-accessibility-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-openjfx-devel - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-openjfx-devel-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-openjfx-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-src - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-src-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-javadoc - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-javadoc-zip - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-accessibility - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-debuginfo - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-debugsource - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-demo - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-demo-slowdebug - addressed in versions 1.8.0.432.b06-0, 1.8.0.442.b06-0
java-1.8.0-openjdk-javadoc-zip - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-accessibility - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-accessibility-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-demo - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-demo-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-javadoc-zip-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-javadoc-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-javadoc - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-src-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-src - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-headless-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-headless - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk-devel-debug - update to 1.8.0.432.b06-1
java-1.8.0-openjdk-devel - addressed in versions 1.8.0.432.b06-1, 1.8.0.432.b06-2.0.2
java-1.8.0-openjdk (Red Hat package) - addressed in versions 1.8.0.432.b06-1.el7_9, 1.8.0.432.b06-1.el8_2, 1.8.0.432.b06-1.el8_4, 1.8.0.432.b06-1.el8_6, 1.8.0.432.b06-1.el9_0, 1.8.0.432.b06-2.el8, 1.8.0.432.b06-2.el9
java-1_8_0-openjdk-devel-debuginfo - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-headless-debuginfo - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-debuginfo - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-demo - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-demo-debuginfo - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-devel - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-headless - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-debugsource - addressed in versions 1.8.0.432-27.108.2, 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-javadoc - update to 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-src - update to 1.8.0.432-150000.3.100.1
java-1_8_0-openjdk-accessibility - update to 1.8.0.432-150000.3.100.1
java-1_8_0-openj9-debugsource - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9 - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-debuginfo - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-demo-debuginfo - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-devel-debuginfo - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-headless-debuginfo - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-headless - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-demo - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-accessibility - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-src - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-javadoc - update to 1.8.0.442-150200.3.51.1
java-1_8_0-openj9-devel - update to 1.8.0.442-150200.3.51.1
IBM Cloud Pak for Security - update to 1.11.0.0
IBM Cloud Object Storage Systems - addressed in versions 3.18.0.84, 3.18.5.40
IBM Content Collector for SAP Applications - addressed in versions 4.0.0.2.0.2, 4.0.0.3, 4.0.0.4
Application Modernization Accelerator - update to 4.0.1
IBM Cloud Transformation Advisor - update to 4.0.1
IBM Tivoli System Automation Application Manager - addressed in versions 4.1.0.3.0.14, 4.1.0.4.0.11, 4.1.0.5.0.9, 4.1.0.6.0.3
Tivoli System Automation for Multiplatforms - addressed in versions 4.1.0.4.0.22, 4.1.0.5.0.16, 4.1.0.6.0.11, 4.1.0.7.0.11, 4.1.1.0.0.5, 4.1.1.1.0.5
IBM Cloud Pak for Watson AIOps - update to 4.8.0
watsonx Assistant for IBM Cloud Pak for Data - update to 4.8.8
IBM Watson Discovery for IBM Cloud Pak for Data - addressed in versions 4.8.8, 5.1.1
IBM Decision Optimization for Cloud Pak for Data - addressed in versions 4.8.9, 5.1.2
App Connect Enterprise Certified Container - addressed in versions 5.0.22, 12.0.6, 12.6.0
Knowledge Catalog Neo4j On Cloud Pak for Data - update to 5.1
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.1.3
watsonx Assistant Cartridge - update to 5.1.3
JDK-8332424: Update IANA Language Subtag Registry to Version 2024 - update to 05-16
IBM Secure External Authentication Server - addressed in versions 6.0.3.1 iFix 02, 6.1.0.2 iFix 02
IBM Sterling Secure Proxy - addressed in versions 6.0.3.1 iFix 03, 6.1.0.1 iFix 03, 6.2.0.1 iFix 02
IBM Sterling Connect:Direct for UNIX - addressed in versions 6.1.0.4.121, 6.3.0.4.4, 6.4.0.1.5
IBM Sterling Connect:Direct Web Services - addressed in versions 6.1.0.27, 6.2.0.26
Session Smart Router - addressed in versions 6.2.10, 6.3.7
IBM Tivoli Monitoring - update to 6.3.0 FP7 Service Pack 6
IBM Sterling Connect:Direct for Microsoft Windows - addressed in versions 6.3.0.4.15, 6.4.0.0.5
IBM Copy Services Manager - update to 6.3.14
JDK-8334418: Update IANA Language Subtag Registry to Version 2024 - update to 06-14
IBM Java SDK - addressed in versions 7.1.5.24, 8.0.8.35
Security Directory Integrator - addressed in versions 7.2.0 LA0034, 10.0.0 LA0005
Tivoli Composite Application Manager for Transactions - update to 7.4.0.2.25
Juniper Secure Analytics (JSA) - update to 7.5.0 UP11 IF03
IBM App Connect Professional - update to 7.5.5.0.30
IBM Semeru Runtimes - addressed in versions 8.0.432.0, 11.0.25.0, 17.0.13.0, 21.0.5.0, 23.0.1.0
IBM Cloud Application Performance Management (APM) - update to 8.1.4.0.28
Storage Protect Operations Center - update to 8.1.26
CICS Transaction Gateway Desktop Edition - addressed in versions 9.1, 9.2.0.2, 9.3.0.0
CICS Transaction Gateway for Multiplatforms - addressed in versions 9.1, 9.2.0.2, 9.3.0.0
IBM TXSeries for Multiplatforms - addressed in versions 9.1.0.3, 10.1.0.0, 11.1.0.0 ifix1
IBM MQ - update to 9.4.2
IBM CICS TX Advanced - addressed in versions 10.1.0.0 ifix36, 11.1.0.0 ifix28
java-11-openjdk-devel - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk-demo - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk-debugsource - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk-headless - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk-debuginfo - addressed in versions 11.0.25.0-3.81.1, 11.0.25.0-150000.3.119.1
java-11-openjdk (Red Hat package) - addressed in versions 11.0.25.0.9-1.el7_9, 11.0.25.0.9-1.el8_2, 11.0.25.0.9-1.el8_4, 11.0.25.0.9-1.el8_6, 11.0.25.0.9-1.el9_0, 11.0.25.0.9-2.el8, 11.0.25.0.9-2.el9
java-11-openjdk-static-libs - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-static-libs-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-src-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-javadoc - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-src - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-jmods-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-jmods - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-javadoc-zip-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-javadoc-zip - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-demo - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-demo-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-devel - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-devel-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-headless - addressed in versions 11.0.25.0.9-1.0.1, 11.0.25.0.9-2.0.1
java-11-openjdk-headless-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-javadoc-debug - update to 11.0.25.0.9-1.0.1
java-11-openjdk-headless-debuginfo - update to 11.0.25.0-150000.3.119.1
java-11-openjdk-javadoc - update to 11.0.25.0-150000.3.119.1
java-11-openjdk-jmods - update to 11.0.25.0-150000.3.119.1
java-11-openjdk-devel-debuginfo - update to 11.0.25.0-150000.3.119.1
java-11-openjdk-src - update to 11.0.25.0-150000.3.119.1
java-11-openjdk-slowdebug - update to 11.0.25.9-3
java-11-openjdk-src-slowdebug - update to 11.0.25.9-3
java-11-openjdk-jmods-slowdebug - update to 11.0.25.9-3
java-11-openjdk-jmods - update to 11.0.25.9-3
java-11-openjdk-javadoc-zip - update to 11.0.25.9-3
java-11-openjdk-javadoc - update to 11.0.25.9-3
java-11-openjdk-headless-slowdebug - update to 11.0.25.9-3
java-11-openjdk-headless - update to 11.0.25.9-3
java-11-openjdk-devel-slowdebug - update to 11.0.25.9-3
java-11-openjdk-devel - update to 11.0.25.9-3
java-11-openjdk-demo-slowdebug - update to 11.0.25.9-3
java-11-openjdk-demo - update to 11.0.25.9-3
java-11-openjdk-debugsource - update to 11.0.25.9-3
java-11-openjdk-debuginfo - update to 11.0.25.9-3
java-11-openjdk - update to 11.0.25.9-3
java-11-openjdk-src - update to 11.0.25.9-3
IBM CICS TX Standard - update to 11.1.0.0 ifix29
IBM App Connect Enterprise - addressed in versions 12.0.12.9, 13.0.2.0
EMC Cloud Tiering Appliance - update to 13.2.0.2.32
java-17-openjdk (Red Hat package) - addressed in versions 17.0.13.0.11-1.el8_4, 17.0.13.0.11-1.el8_6, 17.0.13.0.11-1.el9_0, 17.0.13.0.11-3.el8, 17.0.13.0.11-3.el9
java-17-openjdk-headless - update to 17.0.13.0.11-3.0.2
java-17-openjdk-src - update to 17.0.13.0.11-3.0.2
java-17-openjdk-jmods - update to 17.0.13.0.11-3.0.2
java-17-openjdk-static-libs - update to 17.0.13.0.11-3.0.2
java-17-openjdk-javadoc-zip - update to 17.0.13.0.11-3.0.2
java-17-openjdk-javadoc - update to 17.0.13.0.11-3.0.2
java-17-openjdk-devel - update to 17.0.13.0.11-3.0.2
java-17-openjdk-demo - update to 17.0.13.0.11-3.0.2
java-17-openjdk - update to 17.0.13.0.11-3.0.2
java-17-openjdk-devel-debuginfo - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-devel - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-debugsource - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-debuginfo - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-headless - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-headless-debuginfo - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-demo - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-jmods - update to 17.0.13.0-150400.3.48.2
java-17-openjdk - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-javadoc - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-src - update to 17.0.13.0-150400.3.48.2
java-17-openjdk-src-slowdebug - update to 17.0.13.11-2
java-17-openjdk-src - update to 17.0.13.11-2
java-17-openjdk-slowdebug - update to 17.0.13.11-2
java-17-openjdk-demo-slowdebug - update to 17.0.13.11-2
java-17-openjdk-devel - update to 17.0.13.11-2
java-17-openjdk-devel-slowdebug - update to 17.0.13.11-2
java-17-openjdk-headless - update to 17.0.13.11-2
java-17-openjdk-demo - update to 17.0.13.11-2
java-17-openjdk-headless-slowdebug - update to 17.0.13.11-2
java-17-openjdk-debugsource - update to 17.0.13.11-2
java-17-openjdk-javadoc - update to 17.0.13.11-2
java-17-openjdk-javadoc-zip - update to 17.0.13.11-2
java-17-openjdk-jmods - update to 17.0.13.11-2
java-17-openjdk-debuginfo - update to 17.0.13.11-2
java-17-openjdk - update to 17.0.13.11-2
java-17-openjdk-jmods-slowdebug - update to 17.0.13.11-2
openjdk-17 (debian package) - update to 17.0.13+11-2~deb12u1
openjdk-17-crac-jre-headless (Ubuntu package) - update to 17.0.14+7-0ubuntu1~24.10
openjdk-17-crac-jre (Ubuntu package) - update to 17.0.14+7-0ubuntu1~24.10
openjdk-17-crac-jdk-headless (Ubuntu package) - update to 17.0.14+7-0ubuntu1~24.10
openjdk-17-crac-jdk (Ubuntu package) - update to 17.0.14+7-0ubuntu1~24.10
openjdk-17-crac-jre-zero (Ubuntu package) - update to 17.0.14+7-0ubuntu1~24.10
CloudBoost Virtual Appliance - update to 19.12.0.1
PowerProtect Data Manager - update to 19.19.0-15
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF039, 24.0.0-IF004, 24.0.1
java-21-openjdk (Red Hat package) - addressed in versions 21.0.5.0.10-3.el8, 21.0.5.0.10-3.el9
java-21-openjdk-devel - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-javadoc - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-src - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-jmods - update to 21.0.5.0-150600.3.6.3
java-21-openjdk - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-headless-debuginfo - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-demo - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-debuginfo - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-debugsource - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-devel-debuginfo - update to 21.0.5.0-150600.3.6.3
java-21-openjdk-headless - update to 21.0.5.0-150600.3.6.3
openjdk-21-jdk-headless (Ubuntu package) - addressed in versions 21.0.5+11-1ubuntu1~20.04, 21.0.5+11-1ubuntu1~22.04, 21.0.5+11-1ubuntu1~24.04, 21.0.5+11-1ubuntu1~24.10
openjdk-21-jre-zero (Ubuntu package) - addressed in versions 21.0.5+11-1ubuntu1~20.04, 21.0.5+11-1ubuntu1~22.04, 21.0.5+11-1ubuntu1~24.04, 21.0.5+11-1ubuntu1~24.10
openjdk-21-jre-headless (Ubuntu package) - addressed in versions 21.0.5+11-1ubuntu1~20.04, 21.0.5+11-1ubuntu1~22.04, 21.0.5+11-1ubuntu1~24.04, 21.0.5+11-1ubuntu1~24.10
openjdk-21-jre (Ubuntu package) - addressed in versions 21.0.5+11-1ubuntu1~20.04, 21.0.5+11-1ubuntu1~22.04, 21.0.5+11-1ubuntu1~24.04, 21.0.5+11-1ubuntu1~24.10
openjdk-21-jdk (Ubuntu package) - addressed in versions 21.0.5+11-1ubuntu1~20.04, 21.0.5+11-1ubuntu1~22.04, 21.0.5+11-1ubuntu1~24.04, 21.0.5+11-1ubuntu1~24.10
openjdk-21-crac-jdk-headless (Ubuntu package) - update to 21.0.6+7-0ubuntu1~24.10
openjdk-21-crac-jre-zero (Ubuntu package) - update to 21.0.6+7-0ubuntu1~24.10
openjdk-21-crac-jre-headless (Ubuntu package) - update to 21.0.6+7-0ubuntu1~24.10
openjdk-21-crac-jdk (Ubuntu package) - update to 21.0.6+7-0ubuntu1~24.10
openjdk-21-crac-jre (Ubuntu package) - update to 21.0.6+7-0ubuntu1~24.10
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.19, 23.0.19
java-latest-openjdk-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-src - update to 23.0.1.11-1
java-latest-openjdk-javadoc - update to 23.0.1.11-1
java-latest-openjdk-headless-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-headless - update to 23.0.1.11-1
java-latest-openjdk-devel-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-devel - update to 23.0.1.11-1
java-latest-openjdk-demo-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-demo - update to 23.0.1.11-1
java-latest-openjdk - update to 23.0.1.11-1
java-latest-openjdk-src-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-javadoc-zip - update to 23.0.1.11-1
java-latest-openjdk-jmods-slowdebug - update to 23.0.1.11-1
java-latest-openjdk-jmods - update to 23.0.1.11-1
openjdk-23-jdk (Ubuntu package) - update to 23.0.1+11-1ubuntu1~24.10.1
openjdk-23-jdk-headless (Ubuntu package) - update to 23.0.1+11-1ubuntu1~24.10.1
openjdk-23-jre-zero (Ubuntu package) - update to 23.0.1+11-1ubuntu1~24.10.1
openjdk-23-jre-headless (Ubuntu package) - update to 23.0.1+11-1ubuntu1~24.10.1
openjdk-23-jre (Ubuntu package) - update to 23.0.1+11-1ubuntu1~24.10.1
IBM Business Automation Workflow - addressed in versions 24.0.0-IF005, 24.0.1-IF002
Business Automation Insights - addressed in versions 24.0.0.0.2, 24.0.1.0.1
IBM Security SOAR - update to 51.0.5.0

External References

Related Security Bulletins