{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "Security fixes from OpenJDK 8u452-b09:\n - CVE-2025-21587: JSSE issue allowing remote access or modification of sensitive data\n - CVE-2025-30698: allows limited data access and partial DoS via untrusted Java code\n - CVE-2025-30691: allows limited data access via untrusted code using compiler APIs\n- Security fixes from OpenJDK 8u442-b06:\n - CVE-2025-21502: hotspot vulnerability enabling limited data access java clients\n- Security fixes from OpenJDK 8u432-b06:\n - CVE-2024-21235: sandbox bypass in java clients via exposed APIs\n - CVE-2024-21208: network flaw in sandboxed java clients enabling limited DoS\n - CVE-2024-21210: enabling data modification in sandboxed clients via crafted API input\n - CVE-2024-21217: serialization flaw may trigger partial DoS in sandboxed environments\n- Security fixes from OpenJDK 8u422-b05:\n - CVE-2024-21147: hotspot issue may lead to unauthorized access of sensitive data\n - CVE-2024-21145: enable limited unauthorized data access via untrusted java code\n - CVE-2024-21140: expose limited data to unauthorized read/write via sandboxed java code\n - CVE-2024-21144: allow remote unauthenticated attacker to cause partial DoS\n - CVE-2024-21131: remote access via API may lead to limited data modification\n - CVE-2024-21138: remote API calls may trigger partial DoS in sandboxed java environments\n- Security fixes from OpenJDK 8u412-b08:\n - CVE-2024-21094: lead to unauthorized data changes in sandboxed java apps\n - CVE-2024-21085: concurrency flaw may cause partial DoS in sandboxed java environments\n - CVE-2024-21011: hotspot issue may trigger partial DoS in sandboxed java environments\n - CVE-2024-21068: lead to limited unauthorized data modification in sandboxed deployments\n - CVE-2024-21012: networking issue may allow limited data modification", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2025/clsa-2025_1753799434.json" }, { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" } ], "tracking": { "current_release_date": "2026-04-30T01:09:37Z", "generator": { "date": "2026-04-30T01:09:37Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2025:1753799434", "initial_release_date": "2025-07-29T14:32:42Z", "revision_history": [ { "date": "2025-07-29T14:32:42Z", "number": "1", "summary": "Initial version" }, { "date": "2026-02-16T09:32:45Z", "number": "2", "summary": "Update document" }, { "date": "2026-04-29T15:12:12Z", "number": "3", "summary": "Update document" }, { "date": "2026-04-30T01:09:37Z", "number": "4", "summary": "Update document" } ], "status": "final", "version": "4" }, "title": "java-1.8.0-openjdk: Fix of 19 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-demo@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-fastdebug@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-devel@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-src-fastdebug@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-headless@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-headless-fastdebug@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-devel-slowdebug@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-devel-fastdebug@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-slowdebug@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-headless-slowdebug@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-demo-slowdebug@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-src-slowdebug@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-src@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-demo-fastdebug@1.8.0.452.b09-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-src-slowdebug@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-devel-fastdebug@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-demo-fastdebug@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-headless@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-src@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-devel@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-slowdebug@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-demo-slowdebug@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-demo@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-headless-slowdebug@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-devel-slowdebug@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-src-fastdebug@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-headless-fastdebug@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-fastdebug@1.8.0.402.b06-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-src-slowdebug@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-devel-slowdebug@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-headless-slowdebug@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-demo-slowdebug@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-slowdebug@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-devel-fastdebug@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-src-fastdebug@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-demo-fastdebug@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-headless@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-src@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-devel@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-demo@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-fastdebug@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-headless-fastdebug@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product": { "name": "java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_id": "java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk@1.8.0.392.b08-3.tuxcare.els1.el9?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "product": { "name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "product_id": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-javadoc-zip@1.8.0.452.b09-3.tuxcare.els1.el9?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "product": { "name": "java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "product_id": "java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-javadoc@1.8.0.452.b09-3.tuxcare.els1.el9?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "product": { "name": "java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "product_id": "java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-javadoc@1.8.0.402.b06-3.tuxcare.els1.el9?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "product": { "name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "product_id": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-javadoc-zip@1.8.0.402.b06-3.tuxcare.els1.el9?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "product": { "name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "product_id": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-javadoc-zip@1.8.0.392.b08-3.tuxcare.els1.el9?arch=noarch&epoch=1" } } }, { "category": "product_version", "name": "java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "product": { "name": "java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "product_id": "java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/java-1.8.0-openjdk-javadoc@1.8.0.392.b08-3.tuxcare.els1.el9?arch=noarch&epoch=1" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch" }, "product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch" }, "product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch" }, "product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch" }, "product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch" }, "product_reference": "java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch" }, "product_reference": "java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64" }, "product_reference": "java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-21502", "cwe": { "id": "CWE-195", "name": "Signed to Unsigned Conversion Error" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM Enterprise Edition: 20.3.16 and 21.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21502" } ], "release_date": "2025-01-21T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21208", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21208" } ], "release_date": "2024-10-15T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21145", "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21145" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240719-0008/", "url": "https://security.netapp.com/advisory/ntap-20240719-0008/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21210", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21210" } ], "release_date": "2024-10-15T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2025-30698", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition: 20.3.17 and 21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-30698" } ], "release_date": "2025-04-15T21:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21094", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21094" } ], "release_date": "2024-04-16T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21011", "cwe": { "id": "CWE-117", "name": "Improper Output Neutralization for Logs" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21011" } ], "release_date": "2024-04-16T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21217", "cwe": { "id": "CWE-789", "name": "Memory Allocation with Excessive Size Value" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21217" } ], "release_date": "2024-10-15T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21140", "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21140" } ], "release_date": "2024-07-16T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21235", "cwe": { "id": "CWE-195", "name": "Signed to Unsigned Conversion Error" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and 21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21235" } ], "release_date": "2024-10-15T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21085", "cwe": { "id": "CWE-789", "name": "Memory Allocation with Excessive Size Value" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21085" } ], "release_date": "2024-04-16T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21131", "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21131" } ], "release_date": "2024-07-16T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21138", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition ('Infinite Loop')" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21138" } ], "release_date": "2024-07-16T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2025-30691", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "description", "text": "Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-30691" } ], "release_date": "2025-04-15T21:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-21147", "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21147" } ], "release_date": "2024-07-16T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-21068", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and 22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21068" } ], "release_date": "2024-04-16T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2024-21012", "cwe": { "id": "CWE-350", "name": "Reliance on Reverse DNS Resolution for a Security-Critical Action" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21012" } ], "release_date": "2024-04-16T20:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2025-21587", "cwe": { "id": "CWE-208", "name": "Observable Timing Discrepancy" }, "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition:20.3.17 and 21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21587" } ], "release_date": "2025-04-15T21:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-21144", "notes": [ { "category": "description", "text": "Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "known_affected": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-21144" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240719-0007/", "url": "https://security.netapp.com/advisory/ntap-20240719-0007/" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2024.html", "url": "https://www.oracle.com/security-alerts/cpujul2024.html" } ], "release_date": "2024-07-16T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-29T14:30:36Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1753799434" }, { "category": "none_available", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.392.b08-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.402.b06-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.392.b08-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.402.b06-3.tuxcare.els1.el9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "AlmaLinux-9.2:java-1.8.0-openjdk-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-demo-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-devel-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-headless-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-javadoc-zip-1:1.8.0.452.b09-3.tuxcare.els1.el9.noarch", "AlmaLinux-9.2:java-1.8.0-openjdk-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-fastdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64", "AlmaLinux-9.2:java-1.8.0-openjdk-src-slowdebug-1:1.8.0.452.b09-3.tuxcare.els1.el9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] } ] }