Warning: Undefined array key "Description" in /var/www/www.linuxsecurity.com-443/html/lsadvisories/lsadvisories.php on line 220
Fedora 40: 2024-129d8ca6fc High Severity: javaewah Type Confusion
fedora
March 7, 2024
Change for system JDK from 17 to 21
Summary
JavaEWAH is a word-aligned compressed variant of the Java bitset class.
It uses a 64-bit run-length encoding (RLE) compression scheme.
The goal of word-aligned compression is not to achieve the best
compression, but rather to improve query processing time. Hence, we try
to save CPU cycles, maybe at the expense of storage. However, the EWAH
scheme we implemented is always more efficient storage-wise than an
uncompressed bitmap (implemented in Java as the BitSet class). Unlike
some alternatives, javaewah does not rely on a patented scheme.
Update Information:
Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires Automatic update for lucene-9.9.2-1.fc40. bump java source/target to 1.8, fixes 2266639
Change Log
* Sat Mar 2 2024 Jiri Vanek
References
[ 1 ] Bug #2123726 - consoleImageViewer crashes at start
https://bugzilla.redhat.com/show_bug.cgi?id=2123726
[ 2 ] Bug #2261062 - directory-maven-plugin: FTBFS in Fedora rawhide/f40
https://bugzilla.redhat.com/show_bug.cgi?id=2261062
[ 3 ] Bug #2266639 - directory-maven-plugin fails to build with java-21-openjdk
https://bugzilla.redhat.com/show_bug.cgi?id=2266639
[ 4 ] Bug #2266934 - CVE-2024-1938 chromium: type confusion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2266934
[ 5 ] Bug #2266937 - CVE-2024-1939 chromium: type confusion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2266937
[ 6 ] Bug #2267486 - Include Java 21 as system Java Change in Fedora 40 Beta
https://bugzilla.redhat.com/show_bug.cgi?id=2267486
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-129d8ca6fc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Name: javaewah
Product: Fedora 40
Version: 1.1.13
Release: 10.fc40
Summary: A word-aligned compressed variant of the Java bitset class
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!