SUSE-SU-2024:4306-1

Description of the patch:

This update for java-1_8_0-ibm fixes the following issues:

Updated to Java 8.0 Service Refresh 8 Fix Pack 35 with Oracle October 15 2024 CPU (bsc#1232064):

• CVE-2024-21208: Fixed partial DoS in component Networking (bsc#1231702,JDK-8328286)
• CVE-2024-21210: Fixed unauthorized update, insert or delete access to some of Oracle Java SE accessible data in component Hotspot (bsc#1231711,JDK-8328544)
• CVE-2024-21217: Fixed partial DoS in component Serialization (bsc#1231716,JDK-8331446)
• CVE-2024-21235: Fixed unauthorized read/write access to data in component Hotspot (bsc#1231719,JDK-8332644)

Other issues fixed in past releases:

• CVE-2024-3933: Fixed evaluate constant byteLenNode of arrayCopyChild (bsc#1225470)