Fedora 40: High Severity Type Confusion Patch for Apache Commons Pool
fedora
March 7, 2024
Change for system JDK from 17 to 21
Summary
The goal of Pool package is it to create and maintain an object (instance)
pooling package to be distributed under the ASF license. The package should
support a variety of pool implementations, but encourage support of an
interface that makes these implementations interchangeable.
Update Information:
Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires Automatic update for lucene-9.9.2-1.fc40. bump java source/target to 1.8, fixes 2266639
Topics Covered
Change Log
* Sat Mar 2 2024 Jiri Vanek
References
[ 1 ] Bug #2123726 - consoleImageViewer crashes at start
https://bugzilla.redhat.com/show_bug.cgi?id=2123726
[ 2 ] Bug #2261062 - directory-maven-plugin: FTBFS in Fedora rawhide/f40
https://bugzilla.redhat.com/show_bug.cgi?id=2261062
[ 3 ] Bug #2266639 - directory-maven-plugin fails to build with java-21-openjdk
https://bugzilla.redhat.com/show_bug.cgi?id=2266639
[ 4 ] Bug #2266934 - CVE-2024-1938 chromium: type confusion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2266934
[ 5 ] Bug #2266937 - CVE-2024-1939 chromium: type confusion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2266937
[ 6 ] Bug #2267486 - Include Java 21 as system Java Change in Fedora 40 Beta
https://bugzilla.redhat.com/show_bug.cgi?id=2267486
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-129d8ca6fc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Name: apache-commons-pool
Product: Fedora 40
Version: 1.6
Release: 37.fc40
Summary: Apache Commons Pool Package
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!