{"id":"CLSA-2024-1726773716","summary":"Fix CVE(s): CVE-2024-21011, CVE-2024-21068, CVE-2024-21085, CVE-2024-21094","details":"   * Backport upstream's fixes from OpenJDK 8u412 release.\n     - CVE-2024-21011: possible crash on long exception message in Hotspot.\n     - CVE-2024-21068: incorrect applying an unsigned integer left shift\n       in Hotspot.\n     - CVE-2024-21085: incorrect memory size validation by the NativeUnpack class.\n     - CVE-2024-21094: possible C2 compilation error due to incorrect size\n       validation and out of bounds array access in Hotspot.","modified":"2026-06-04T09:47:14.771227662Z","published":"2024-09-19T19:22:04Z","upstream":["CVE-2024-21011","CVE-2024-21068","CVE-2024-21085","CVE-2024-21094"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1726773716.html"}],"affected":[{"package":{"name":"openjdk-8-demo","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-demo?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u402-ga-0ubuntu1~18.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1726773716.json"}},{"package":{"name":"openjdk-8-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u402-ga-0ubuntu1~18.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1726773716.json"}},{"package":{"name":"openjdk-8-jdk","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-jdk?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u402-ga-0ubuntu1~18.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1726773716.json"}},{"package":{"name":"openjdk-8-jdk-headless","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-jdk-headless?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u402-ga-0ubuntu1~18.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1726773716.json"}},{"package":{"name":"openjdk-8-jre","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-jre?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u402-ga-0ubuntu1~18.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1726773716.json"}},{"package":{"name":"openjdk-8-jre-headless","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-jre-headless?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u402-ga-0ubuntu1~18.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1726773716.json"}},{"package":{"name":"openjdk-8-jre-zero","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-jre-zero?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u402-ga-0ubuntu1~18.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1726773716.json"}},{"package":{"name":"openjdk-8-source","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openjdk-8-source?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u402-ga-0ubuntu1~18.04+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1726773716.json"}}],"schema_version":"1.7.5"}