SUSE-RU-2024:0097-1: Recommended update for Java

Q: What operational behavior should administrators validate after applying this update?

For Procrun services, validate configured JVM-mode stack sizes, automatic creation of missing log directories, Windows service dependency handling, and cleanup of child processes after an unclean stop. For jsvc, validate repeated DaemonController.reload() calls, which were fixed to work beyond the first invocation.

Q: Are specific vulnerabilities or CVE identifiers listed for this update?

No CVE identifiers or individual security vulnerability details are provided in the supplied advisory data. The listed changes are primarily component updates and fixes to Apache Commons Daemon behavior.

Published Jan 12, 2024

Updated

This update for Java fixes the following issues: apache-commons-daemon was updated from version 1.3.2 to 1.3.4: Version 1.3.4: Procrun: Configured stack size now applies to the main thread when running in JVM mode. Fixes DAEMON-451. Procrun: If the specified log directory does not exist, attempt to create any missing parent directories, as well as the specified directory, when the service starts. Fixes DAEMON-452. Procrun: Allow Windows service dependencies to be managed by Procrun or by 'sc config ...'. Fixes DAEMON-458. jsvc: Fix DaemonController.reload() only working the first time it is called. Fixes DAEMON-459. Thanks to Klaus Malorny. jsvc: Remove incorrent definition 'supportedos' which defined in psupport.m4 file to fix jsvc build error on riscv64. Version 1.3.3: Procrun: ensure all child processes are cleaned up if the service does not stop cleanly. Procrun: Fix creation of duplicate ACL entries on some Windows platforms. Updates: Bump actions/cache from 3.0.8 to 3.0.11. Bump actions/checkout from 3.0.2 to 3.1.0. Bump actions/setup-java from 3.5.1 to 3.6.0. Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0. aqute-bnd was updated from version 5.2.0 to 6.3.1: For the full list of changes please consult the following: https://github.com/bndtools/bnd/wiki/Changes-in-6.3.1 https://github.com/bndtools/bnd/wiki/Changes-in-6.3.0 https://github.com/bndtools/bnd/wiki/Changes-in-6.2.0 https://github.com/bndtools/bnd/wiki/Changes-in-6.1.0 https://github.com/bndtools/bnd/wiki/Changes-in-6.0.0 https://github.com/bndtools/bnd/wiki/Changes-in-5.3.0 tomcat-jakartaee-migration: New package implementation of tomcat-jakartaee-migration at version 1.0.7 libtcnative-1-0 was updated from version 1.2.22 to 1.2.38: Changes of version 1.2.22 to 1.2.38: Align default pass phrase prompt with HTTPd. Fix memory leak in SNI processing. Update the recommended minimum version of OpenSSL to 1.1.1v. Update the recommended minimum version of APR to 1.7.4. Document the TLS rengotiation behaviour. Add HOWTO-RELEASE.txt that describes the release process. Refactor library initialization so it is compatible with Tomcat 10.1.x onwards where a number of Java classes have been removed. Map the OpenSSL 3.x FIPS behaviour to the OpenSSL 1.x API to allow clients to determine if the FIPS provider is being used when Tomcat Native is compiled against OpenSSL 3.x. Fix crash when attempting to read TLS session ID after a handshake failure. Enable downloaddeps.sh to be called from any directory. Fix release script so it works with the current git layout. Correct previous fix that enabled building to continue with OpenSSL 3.x. Remove remaining reference to pkg-config which is no longer included in the Tomcat Native distribution. Additional changes required to provided support for using OpenSSL Engines that use proprietary key formats. Correct handling of WINVER in make file to use correct constant for Windows 7. Add constants for Windows 8, Windows 8.1 and Windows 10. Rename WINNT to WIN2k as it is used for Windows 2000 upwards, not Windows NT upwards. Add a patch for APR that fixes an issue where some Windows systems in some configurations would only listen on IPv6 addresses on dual stack systems even though configured to listen on both IPv6 and IPv4 addresses. Correct a regression in the fix for 65181 that prevented an error message from being displayed if an invalid key file was provided and no OpenSSL Engine was configured. Improve support for using OpenSSL Engines that use proprietary key formats. Enable building to continue against OpenSSL 3.x and 1.1.1. Incomplete name mangling fix for C++ compilers in tcnapi.h. Improve OS-specific header include for native thread id. Disable keylog callback support for LibreSSL. Add support for SSLContext.addChainCertificateRaw() with LibreSSL 2.9.1 and up. Add support for HP-UX's lwpself() in our sslthreadid(void). Remove default option passed for rpath to linker on HP-UX. Add an option to allow the OCSP responder check to be bypassed. Note that if OCSP is enabled, a missing responder is now treated as an error. Fix compilation with LibreSSL. libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support. Correct configure message for OpenSSL libdir. Clean up install target. configure output for OpenSSL wrong/incomplete sometimes. Drop obsolete build time workarounds for HP-UX. Add support for FreeBSD's pthreadgetthreadidnp() in our sslthreadid(void). Introduce tcngetthreadid(void) to reduce code duplication. Fix linking against OpenSSL in non-standard locations on FreeBSD.

Affected Software

140 affected componentsFixes available

All of the following

SUSE Development Tools Module 15-SP4 (noarch)

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE Development Tools Module 15-SP5 (noarch)

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE Web and Scripting Module 15-SP4 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE Web and Scripting Module 15-SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64)

Any of the following

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64)

Any of the following

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (noarch)

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64)

Any of the following

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (noarch)

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64)

Any of the following

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (noarch)

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (noarch)

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (noarch)

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64)

Any of the following

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64)

Any of the following

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP2 (noarch)

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64)

Any of the following

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP3 (noarch)

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE SUSE Enterprise Storage 7.1 (aarch64 x86_64)

Any of the following

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE SUSE Enterprise Storage 7.1 (noarch)

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE SUSE CaaS Platform 4.0 (x86_64)

Any of the following

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

All of the following

SUSE openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/apache-commons-daemon-jsvc-debuginfo<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/apache-commons-daemon-jsvc<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE openSUSE Leap 15.4 (noarch)

Any of the following

suse/bnd-maven-plugin<6.3.1-150200.3.12.1

6.3.1-150200.3.12.1

suse/apache-commons-daemon-javadoc<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/bnd-maven-plugin-javadoc<6.3.1-150200.3.12.1

6.3.1-150200.3.12.1

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

suse/aqute-bnd-javadoc<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

suse/aqute-bnd<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/apache-commons-daemon-jsvc-debuginfo<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/apache-commons-daemon-debugsource<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/apache-commons-daemon-jsvc<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-devel-1.2.38-150100.3.9.2

1-0-devel-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/apache-commons-daemon<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE openSUSE Leap 15.5 (noarch)

Any of the following

suse/bnd-maven-plugin<6.3.1-150200.3.12.1

6.3.1-150200.3.12.1

suse/apache-commons-daemon-javadoc<1.3.4-150200.11.12.2

1.3.4-150200.11.12.2

suse/bnd-maven-plugin-javadoc<6.3.1-150200.3.12.1

6.3.1-150200.3.12.1

suse/aqute-bndlib<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

suse/aqute-bnd-javadoc<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

suse/aqute-bnd<6.3.1-150200.3.12.2

6.3.1-150200.3.12.2

All of the following

SUSE Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

All of the following

SUSE Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libtcnative<1-0-debuginfo-1.2.38-150100.3.9.2

1-0-debuginfo-1.2.38-150100.3.9.2

suse/libtcnative<1-0-1.2.38-150100.3.9.2

1-0-1.2.38-150100.3.9.2

suse/libtcnative<1-0-debugsource-1.2.38-150100.3.9.2

1-0-debugsource-1.2.38-150100.3.9.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/aqute-bndlib to a version that resolves this vulnerability.
Fixed in 6.3.1-150200.3.12.2
Upgrade
Upgrade suse/apache-commons-daemon-debugsource to a version that resolves this vulnerability.
Fixed in 1.3.4-150200.11.12.2
Upgrade
Upgrade suse/libtcnative to a version that resolves this vulnerability.
Fixed in 1-0-devel-1.2.38-150100.3.9.2
Upgrade
Upgrade suse/libtcnative to a version that resolves this vulnerability.
Fixed in 1-0-debuginfo-1.2.38-150100.3.9.2
Upgrade
Upgrade suse/apache-commons-daemon to a version that resolves this vulnerability.
Fixed in 1.3.4-150200.11.12.2
Upgrade
Upgrade suse/libtcnative to a version that resolves this vulnerability.
Fixed in 1-0-debugsource-1.2.38-150100.3.9.2
Upgrade
Upgrade suse/libtcnative to a version that resolves this vulnerability.
Fixed in 1-0-1.2.38-150100.3.9.2
Upgrade
Upgrade suse/apache-commons-daemon-jsvc-debuginfo to a version that resolves this vulnerability.
Fixed in 1.3.4-150200.11.12.2
Upgrade
Upgrade suse/apache-commons-daemon-jsvc to a version that resolves this vulnerability.
Fixed in 1.3.4-150200.11.12.2
Upgrade
Upgrade suse/bnd-maven-plugin to a version that resolves this vulnerability.
Fixed in 6.3.1-150200.3.12.1
Upgrade
Upgrade suse/apache-commons-daemon-javadoc to a version that resolves this vulnerability.
Fixed in 1.3.4-150200.11.12.2
Upgrade
Upgrade suse/bnd-maven-plugin-javadoc to a version that resolves this vulnerability.
Fixed in 6.3.1-150200.3.12.1
Upgrade
Upgrade suse/aqute-bnd-javadoc to a version that resolves this vulnerability.
Fixed in 6.3.1-150200.3.12.2
Upgrade
Upgrade suse/aqute-bnd to a version that resolves this vulnerability.
Fixed in 6.3.1-150200.3.12.2
Upgrade
Upgrade apache-commons-daemon to a version that resolves this vulnerability.
Fixed in 1.3.4
Upgrade
Upgrade aqute-bnd to a version that resolves this vulnerability.
Fixed in 6.3.1
Upgrade
Upgrade tomcat-jakartaee-migration to a version that resolves this vulnerability.
Fixed in 1.0.7
Upgrade
Upgrade libtcnative-1-0 to a version that resolves this vulnerability.
Fixed in 1.2.38
Upgrade
Upgrade APR to a version that resolves this vulnerability.
Fixed in 1.7.4
Upgrade
Upgrade OpenSSL to a version that resolves this vulnerability.
Fixed in 1.1.1v
Upgrade
Upgrade actions/cache to a version that resolves this vulnerability.
Fixed in 3.0.11
Upgrade
Upgrade actions/checkout to a version that resolves this vulnerability.
Fixed in 3.1.0
Upgrade
Upgrade actions/setup-java to a version that resolves this vulnerability.
Fixed in 3.6.0
Upgrade
Upgrade spotbugs-maven-plugin to a version that resolves this vulnerability.
Fixed in 4.7.3.0
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP4-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP5-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Web-Scripting-15-SP4-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Web-Scripting-15-SP5-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP1-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2024-97=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2024-97=1

Event History

Jan 12, 2024

Advisory Published

via SUSE·08:30 AM

Frequently Asked Questions

What operational behavior should administrators validate after applying this update?

For Procrun services, validate configured JVM-mode stack sizes, automatic creation of missing log directories, Windows service dependency handling, and cleanup of child processes after an unclean stop. For jsvc, validate repeated DaemonController.reload() calls, which were fixed to work beyond the first invocation.

Are specific vulnerabilities or CVE identifiers listed for this update?

No CVE identifiers or individual security vulnerability details are provided in the supplied advisory data. The listed changes are primarily component updates and fixes to Apache Commons Daemon behavior.

SUSE-RU-2024:0097-1: Recommended update for Java

Affected Software

Remediation

Event History

Frequently Asked Questions

What operational behavior should administrators validate after applying this update?

Are specific vulnerabilities or CVE identifiers listed for this update?

Company

Resources

Contact