Oracle Java SE: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• High 8.8
  CVE-2023-42950

  A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi
  Mar 28, 2024
• High 8.1
  CVE-2024-36138

  Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions…

  Node.js node nodejs-16 nodejs-21 Wolfi
  Sep 7, 2024
• High 7.5
  CVE-2024-25062

  An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD…

  qt6-qtwebengine libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 4, 2024
• Medium 4.8
  CVE-2024-21235

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 15, 2024
• Low 3.7
  CVE-2024-21208

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 15, 2024
• Low 3.7
  CVE-2024-21210

  Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 15, 2024
• Low 3.7
  CVE-2024-21211

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE GraalVM openjdk17 Alpine Wolfi
  Oct 15, 2024
• Low 3.7
  CVE-2024-21217

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Oct 15, 2024

Revision history

1. 2026-01-25 #57

   Neue Updates von Dell aufgenommen

2. 2025-09-11 #56

   Neue Updates von IBM aufgenommen

3. 2025-08-21 #55

   Neue Updates von IBM aufgenommen

4. 2025-07-17 #54

   Neue Updates von IBM aufgenommen

5. 2025-07-10 #53

   Neue Updates von HCL aufgenommen

6. 2025-07-03 #52

   Neue Updates von IBM aufgenommen

7. 2025-07-02 #51

   Neue Updates von IBM aufgenommen

8. 2025-06-23 #50

   Neue Updates von IBM aufgenommen

9. 2025-06-22 #49

   Neue Updates von IBM aufgenommen

10. 2025-06-10 #48

    Neue Updates von NetApp aufgenommen

11. 2025-05-21 #47

    Neue Updates von HCL aufgenommen

12. 2025-05-04 #46

    Neue Updates von IBM aufgenommen

13. 2025-05-01 #45

    Neue Updates von IBM aufgenommen

14. 2025-04-27 #44

    Neue Updates von IBM aufgenommen

15. 2025-04-09 #43

    Neue Updates von IBM aufgenommen

16. 2025-04-08 #42

    Neue Updates von IBM aufgenommen

17. 2025-03-26 #41

    Neue Updates von IBM aufgenommen

18. 2025-03-11 #40

    Neue Updates von IBM aufgenommen

19. 2025-03-10 #39

    Neue Updates von Ubuntu aufgenommen

20. 2025-03-06 #38

    Neue Updates von IBM aufgenommen

21. 2025-02-27 #37

    Neue Updates von IBM und IBM-APAR aufgenommen

22. 2025-02-24 #36

    Neue Updates von IBM aufgenommen

23. 2025-02-23 #35

    Neue Updates von IBM aufgenommen

24. 2025-02-19 #34

    Neue Updates von openSUSE aufgenommen

25. 2025-02-18 #33

    Neue Updates von IBM und openSUSE aufgenommen

References

• Oracle Critical Patch Update Advisory - October 2024 - Appendix Oracle Java SE vom 2024-10-15
  https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixJAVA
• Azul Zulu builds of OpenJDK vom 2024-10-15
  https://docs.azul.com/core/pdfs/october-2024/azul-zulu-ca-release-notes-october-2024-rev1.0.pdf
• Red Hat Security Advisory RHSA-2024:8120 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8120
• Red Hat Security Advisory RHSA-2024:8121 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8121
• Red Hat Security Advisory RHSA-2024:8122 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8122
• Red Hat Security Advisory RHSA-2024:8119 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8119
• Red Hat Security Advisory RHSA-2024:8124 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8124
• Red Hat Security Advisory RHSA-2024:8118 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8118
• Red Hat Security Advisory RHSA-2024:8128 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8128
• Red Hat Security Advisory RHSA-2024:8129 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8129
• Red Hat Security Advisory RHSA-2024:8125 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8125
• Red Hat Security Advisory RHSA-2024:8127 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8127
• Red Hat Security Advisory RHSA-2024:8123 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8123
• Red Hat Security Advisory RHSA-2024:8126 vom 2024-10-16
  https://access.redhat.com/errata/RHSA-2024:8126
• Oracle Linux Security Advisory ELSA-2024-8121 vom 2024-10-18
  https://linux.oracle.com/errata/ELSA-2024-8121.html
• Red Hat Security Advisory RHSA-2024:8116 vom 2024-10-17
  https://access.redhat.com/errata/RHSA-2024:8116
• Red Hat Security Advisory RHSA-2024:8117 vom 2024-10-17
  https://rhn.redhat.com/errata/RHSA-2024:8117.html
• Oracle Linux Security Advisory ELSA-2024-8127 vom 2024-10-18
  https://linux.oracle.com/errata/ELSA-2024-8127.html
• Oracle Linux Security Advisory ELSA-2024-8117 vom 2024-10-18
  https://linux.oracle.com/errata/ELSA-2024-8117.html
• Oracle Linux Security Advisory ELSA-2024-8124 vom 2024-10-18
  https://linux.oracle.com/errata/ELSA-2024-8124.html
• Debian Security Advisory DLA-3929 vom 2024-10-21
  https://lists.debian.org/debian-lts-announce/2024/10/msg00020.html
• Debian Security Advisory DLA-3927 vom 2024-10-21
  https://lists.debian.org/debian-lts-announce/2024/10/msg00018.html
• Debian Security Advisory DSA-5794 vom 2024-10-21
  https://lists.debian.org/debian-security-announce/2024/msg00208.html
• OpenJDK Vulnerability Advisory
  https://openjdk.org/groups/vulnerability/advisories/2024-10-15
• SUSE Security Update SUSE-SU-2024:3802-1 vom 2024-10-30
  https://lists.suse.com/pipermail/sle-security-updates/2024-October/019718.html
• IBM Security Bulletin
  https://www.ibm.com/support/pages/node/7174634
• openSUSE Security Update OPENSUSE-SU-2024:14449-1 vom 2024-11-02
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/CYPS4PNCRNNFM3OYJLTXOMYVAPX5WDWV/
• openSUSE Security Update OPENSUSE-SU-2024:14448-1 vom 2024-11-02
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KDGJD2OULS4GVLFGY4DZH6L7TX3XS7RK/
• SUSE Security Update SUSE-SU-2024:3875-1 vom 2024-11-01
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GLU5JTTGFTD7YI4RRECCJZQWTOZHUSNK/
• Hitachi Vulnerability Information HITACHI-SEC-2024-147 vom 2024-11-07
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-147/index.html
• openSUSE Security Update OPENSUSE-SU-2024:14465-1 vom 2024-11-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XKGLVFB244SXCHDTKBD64C7SBDSC7V7W/
• Ubuntu Security Notice USN-7097-1 vom 2024-11-11
  https://ubuntu.com/security/notices/USN-7097-1
• Ubuntu Security Notice USN-7096-1 vom 2024-11-11
  https://ubuntu.com/security/notices/USN-7096-1
• Ubuntu Security Notice USN-7099-1 vom 2024-11-11
  https://ubuntu.com/security/notices/USN-7099-1
• Ubuntu Security Notice USN-7098-1 vom 2024-11-11
  https://ubuntu.com/security/notices/USN-7098-1
• SUSE Security Update SUSE-SU-2024:3963-1 vom 2024-11-11
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019804.html
• SUSE Security Update SUSE-SU-2024:3963-1 vom 2024-11-11
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YF4VNHR3FWXUMWTELTEOVDEWZ6SVMYHZ/
• SUSE Security Update SUSE-SU-2024:3987-1 vom 2024-11-13
  https://lists.suse.com/pipermail/sle-security-updates/2024-November/019817.html
• Ubuntu Security Notice USN-7124-1 vom 2024-11-25
  https://ubuntu.com/security/notices/USN-7124-1
• Oracle Linux Security Advisory ELSA-2024-8116 vom 2024-11-28
  https://linux.oracle.com/errata/ELSA-2024-8116.html
• Oracle Linux Security Advisory ELSA-2024-8120 vom 2024-11-28
  https://linux.oracle.com/errata/ELSA-2024-8120.html
• Dell Security Advisory DSA-2024-477 vom 2024-12-03
  https://www.dell.com/support/kbdoc/de-de/000255884/dsa-2024-477-security-update-for-dell-networker-runtime-environment-nre-multiple-component-vulnerabilities
• IBM Security Bulletin 7177827 vom 2024-12-04
  https://www.ibm.com/support/pages/node/7177827
• SUSE Security Update SUSE-SU-2024:4202-1 vom 2024-12-05
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XPEHHO3XQ47QD6IA2ZDPCOMANOINIDBP/
• IBM Security Bulletin 7177984 vom 2024-12-05
  https://www.ibm.com/support/pages/node/7177984
• SUSE Security Update SUSE-SU-2024:4252-1 vom 2024-12-06
  https://lists.suse.com/pipermail/sle-security-updates/2024-December/019963.html
• IBM Security Bulletin 7178094 vom 2024-12-06
  https://www.ibm.com/support/pages/node/7178094
• Gentoo Linux Security Advisory GLSA-202412-07 vom 2024-12-07
  https://security.gentoo.org/glsa/202412-07
• Red Hat Security Advisory RHSA-2024:10926 vom 2024-12-10
  https://access.redhat.com/errata/RHSA-2024:10926
• IBM Security Bulletin 7178390 vom 2024-12-10
  https://www.ibm.com/support/pages/node/7178390
• SUSE Security Update SUSE-SU-2024:4306-1 vom 2024-12-12
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/MXBN2J5OLQHHEFQZKWDMPVG3S6TODMOZ/
• Amazon Linux Security Advisory ALAS-2024-2720 vom 2024-12-20
  https://alas.aws.amazon.com/AL2/ALAS-2024-2720.html
• IBM Security Bulletin 7180215 vom 2025-01-03
  https://www.ibm.com/support/pages/node/7180215
• IBM Security Bulletin 7180388 vom 2025-01-13
  https://www.ibm.com/support/pages/node/7180388
• Change Log for Amazon Corretto 11 vom 2025-01-21
  https://github.com/corretto/corretto-11/blob/ece67a968d57210c69d3b9153576613846c1cacf/CHANGELOG.md
• Change Log for Amazon Corretto 8 vom 2025-01-21
  https://github.com/corretto/corretto-8/blob/14eb6b297ac476ca5734706b40903e5a69ecd74a/CHANGELOG.md
• IBM Security Bulletin 7181346 vom 2025-01-22
  https://www.ibm.com/support/pages/node/7181346
• IBM Security Bulletin 7182184 vom 2025-01-31
  https://www.ibm.com/support/pages/node/7182184
• Ubuntu Security Notice USN-7096-2 vom 2025-02-05
  https://ubuntu.com/security/notices/USN-7096-2
• IBM Security Bulletin 7182775 vom 2025-02-07
  https://www.ibm.com/support/pages/node/7182775
• openSUSE Security Update OPENSUSE-SU-2025:14755-1 vom 2025-02-10
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T7KZSNPFAS32QHPRWSJGI2D4QTO3KWTH/
• SUSE Security Update SUSE-SU-2025:0435-1 vom 2025-02-11
  https://lists.suse.com/pipermail/sle-security-updates/2025-February/020317.html
• IBM Security Bulletin 7183091 vom 2025-02-12
  https://www.ibm.com/support/pages/node/7183091
• IBM Security Bulletin 7181926 vom 2025-02-12
  https://www.ibm.com/support/pages/node/7181926
• IBM Security Bulletin 7183567 vom 2025-02-18
  https://www.ibm.com/support/pages/node/7183567
• IBM Security Bulletin 7183584 vom 2025-02-18
  https://www.ibm.com/support/pages/node/7183584
• openSUSE Security Update OPENSUSE-SU-2025:0066-1 vom 2025-02-18
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GS63GCBRVH7N4JEIZNQAPVFNNVB2OGSU/
• openSUSE Security Update OPENSUSE-SU-2025:0067-1 vom 2025-02-20
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/XA5CCGSPUXUTQHDG25O5DM4G37BLRUMN/
• IBM Security Bulletin 7183993 vom 2025-02-22
  https://www.ibm.com/support/pages/node/7183993
• IBM Security Bulletin 7184062 vom 2025-02-25
  https://www.ibm.com/support/pages/node/7184062
• IBM Security Bulletin 7184453 vom 2025-02-28
  https://www.ibm.com/support/pages/node/7184453
• IBM Security Bulletin 7184323 vom 2025-02-27
  https://www.ibm.com/support/pages/node/7184323
• IBM Security Bulletin 7184326 vom 2025-02-27
  https://www.ibm.com/support/pages/node/7184326
• IBM Security Bulletin 7184956 vom 2025-03-06
  https://www.ibm.com/support/pages/node/7184956
• Ubuntu Security Notice USN-7338-1 vom 2025-03-11
  https://ubuntu.com/security/notices/USN-7338-1
• Ubuntu Security Notice USN-7339-1 vom 2025-03-11
  https://ubuntu.com/security/notices/USN-7339-1
• IBM Security Bulletin 7185372 vom 2025-03-11
  https://www.ibm.com/support/pages/node/7185372
• IBM Security Bulletin 7229072 vom 2025-03-26
  https://www.ibm.com/support/pages/node/7229072
• IBM Security Bulletin 7230332 vom 2025-04-08
  https://www.ibm.com/support/pages/node/7230332
• IBM Security Bulletin 7230474 vom 2025-04-09
  https://www.ibm.com/support/pages/node/7230474