CESA-2024:0223 -- centos 7 java-1.8.0-openjdkID: oval:org.secpod.oval:def:206061 | Date: (C)2024-02-09 (M)2024-04-29 |
Class: PATCH | Family: unix |
Security Fix: OpenJDK: array out-of-bounds access due to missing range check in C1 compiler OpenJDK: RSA padding issue and timing side-channel attack against TLS OpenJDK: JVM class file verifier flaw allows unverified bytecode execution OpenJDK: range check loop optimization issue OpenJDK: arbitrary Java code execution in Nashorn OpenJDK: logging of digital signature private keys For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Bug Fix:
Product: |
java-1.8.0-openjdk |